CVE-2022-4121

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap...

5.5 MediumFix available

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.56%Down 0.5 points since Jan 18, 2023

What each source reports

NVD Score used 5.5

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Record: CVE-2022-4121
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

CVE List 5.5

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Record: CVE-2022-4121
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

EUVDEUVD-2022-51488 5.5

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Record: EUVD-2022-51488
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-73jp-p4j5-5wmx 5.5

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap...

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Record: GHSA-73jp-p4j5-5wmx
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSV 5.5

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Record: CVE-2022-4121
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-4121 5.5

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Record: DEBIAN-CVE-2022-4121
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-03

OSVUBUNTU-CVE-2022-4121 5.5

In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.

Record: UBUNTU-CVE-2022-4121
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2022-0470 No score

Updated libetpan packages fix security vulnerability

Null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c. (CVE-2022-4121)

Record: MGASA-2022-0470
Updated: 2026-11-02

OSVUSN-7740-1 No score

libetpan vulnerability

It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan to crash, resulting in a denial of service.

Record: USN-7740-1
Updated: 2026-11-02

Affected products

libetpan project libetpan

Affected packages

Affected packages
Package	Affected	Fixed
`libetpan` Debian:12	before 1.9.4-3.1	1.9.4-3.1
`libetpan` Debian:13	before 1.9.4-3.1	1.9.4-3.1
`libetpan` Debian:14	before 1.9.4-3.1	1.9.4-3.1
`libetpan` Debian:10	before 1.9.3-2+deb10u2, plus listed versions 1.9.3-21.9.3-2+deb10u1	1.9.3-2+deb10u2
`libetpan` Debian:11	before 1.9.4-3+deb11u1, plus listed versions 1.9.4-3	1.9.4-3+deb11u1
`libetpan` Mageia:8	before 1.9.4-4.1.mga8	1.9.4-4.1.mga8
`libetpan` Ubuntu:Pro:16.04:LTS	before 1.6-1ubuntu0.1+esm1, plus listed versions 1.5-21.6-11.6-1build11.6-1ubuntu0.1	1.6-1ubuntu0.1+esm1
`libetpan` Ubuntu:Pro:18.04:LTS	before 1.8.0-1ubuntu0.1~esm1, plus listed versions 1.8.0-1	1.8.0-1ubuntu0.1~esm1
`libetpan` Ubuntu:Pro:20.04:LTS	before 1.9.4-2ubuntu0.1~esm1, plus listed versions 1.9.3-21.9.4-2	1.9.4-2ubuntu0.1~esm1
`libetpan` Ubuntu:22.04:LTS	before 1.9.4-3+deb11u1build0.22.04.1, plus listed versions 1.9.4-3	1.9.4-3+deb11u1build0.22.04.1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-4121 is a medium vulnerability (CVSS 5.5) in Libetpan Project Libetpan, published December 17, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in libetpan 1.9.4-3.1.

References

Show 7 moreShow less