CVE-2008-5514
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the...
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
CVE-2008-5514- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
CVE-2008-5514- Updated
- 2026-11-02
EUVDEUVD-2008-5491 No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
EUVD-2008-5491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9m53-2xrc-rq26 No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the...
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
GHSA-9m53-2xrc-rq26- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
CVE-2008-5514- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-5514 No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
DEBIAN-CVE-2008-5514- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
alpineDebian:12 |
before 2.02-3.1 | 2.02-3.1 |
alpineDebian:13 |
before 2.02-3.1 | 2.02-3.1 |
alpineDebian:14 |
before 2.02-3.1 | 2.02-3.1 |
uw-imapDebian:12 |
before 2007b~dfsg-1.1 | 2007b~dfsg-1.1 |
uw-imapDebian:5.0 From an advisory covering 3 CVEs |
before 2007b~dfsg-4+lenny3 | 2007b~dfsg-4+lenny3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5514 is a medium vulnerability (CVSS 4.3) in University Of Washington Imap, published December 23, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in alpine 2.02-3.1.
References
washington.edu/imap/documentation/RELNOTES.html
secunia.com/advisories/33275
securityfocus.com/bid/32958
exchange.xforce.ibmcloud.com/vulnerabilities/47526
securitytracker.com/id?1021485
Show 7 moreShow less
redhat.com/archives/fedora-package-announce/2009-January/msg00846.html
bugzilla.redhat.com/show_bug.cgi?id=477227
vupen.com/english/advisories/2008/3490
mandriva.com/security/advisories?name=MDVSA-2009:146
nvd.nist.gov/vuln/detail/CVE-2008-5514
github.com/advisories/GHSA-9m53-2xrc-rq26
security-tracker.debian.org/tracker/CVE-2008-5514