Unrated severityNVD Advisory· Published Jun 2, 2011· Updated Apr 29, 2026
CVE-2011-1947
CVE-2011-1947
Description
fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.
Affected products
52cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*+ 51 more
- cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:5.9.9:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre4:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre8:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre9:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc10:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc3:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc4:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc5:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc7:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc8:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc9:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.13:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.14:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.15:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.16:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.17:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.18:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.19:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc1:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc2:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc3:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc4:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc5:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:fetchmail:fetchmail:6.3.9:rc2:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
14- gitorious.org/fetchmail/fetchmail/blobs/legacy_63/fetchmail-SA-2011-01.txtnvd
- lists.fedoraproject.org/pipermail/package-announce/2011-June/061634.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2011-June/061672.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2011-June/061735.htmlnvd
- openwall.com/lists/oss-security/2011/05/30/1nvd
- openwall.com/lists/oss-security/2011/05/31/12nvd
- openwall.com/lists/oss-security/2011/05/31/17nvd
- openwall.com/lists/oss-security/2011/06/01/2nvd
- www.fetchmail.info/fetchmail-SA-2011-01.txtnvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/archive/1/518251/100/0/threadednvd
- www.securityfocus.com/bid/48043nvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/67700nvd
News mentions
0No linked articles in our index yet.