Homepage

Uncontrolled Recursion The advisory has been revoked - it doesn't affect any version of package claws-mail  (opens in a new tab)

Threat Intelligence

EPSS
1.78% (76th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU2010-CLAWSMAIL-1029638
  • published1 Nov 2020
  • disclosed28 Jul 2020
Report a new vulnerability Found a mistake?

Introduced: 28 Jul 2020

CVE-2020-16094  (opens in a new tab)
CWE-674  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:20.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream claws-mail package and not the claws-mail package as distributed by Ubuntu.

In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.

References