← All advisories

Medium severity5.3NVD Advisory· Published Feb 13, 2019· Updated Jun 17, 2026

CVE-2019-8337

CVE-2019-8337

Description

In msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate-verification results are not properly checked.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Marlam/Mpopinferred2 versions
= 1.4.3+ 1 more
- (no CPE)range: = 1.4.3
- (no CPE)range: =1.4.3
Marlam/Msmtpllm-fuzzy
Range: =1.8.2
osv-coords
pkg:rpm/opensuse/mstmp&distro=openSUSE%20Tumbleweed
Range: < 1.8.16-1.1

Patches

Vulnerability mechanics

References

3

gitlab.marlam.de/marlam/mpop/commit/b51a6c6b8b83bf0913cc52fa2ff64307e987a5b8nvdPatchThird Party Advisory
marlam.de/mpop/news/mpop-1-4-3/nvdPatchThird Party Advisory
marlam.de/msmtp/news/nvdPatchVendor Advisory

News mentions

0

No linked articles in our index yet.