CVE-2008-5514
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the...
CVE-2008-5514 is a medium vulnerability (CVSS 4.3) in University Of Washington Imap, published December 23, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in alpine 2.02-3.1.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.76%EPSS, 78th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.02-3.1alpine +4 more
Description
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
CVE-2008-5514- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
CVE-2008-5514- Updated
- 2026-11-02
EUVDEUVD-2008-5491No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
EUVD-2008-5491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9m53-2xrc-rq26No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the...
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
GHSA-9m53-2xrc-rq26- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
CVE-2008-5514- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-5514No score
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Record
DEBIAN-CVE-2008-5514- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
washington.edu/imap/documentation/RELNOTES.html
secunia.com/advisories/33275
securityfocus.com/bid/32958
exchange.xforce.ibmcloud.com/vulnerabilities/47526
securitytracker.com/id?1021485
Show 7 moreShow less
redhat.com/archives/fedora-package-announce/2009-January/msg00846.html
bugzilla.redhat.com/show_bug.cgi?id=477227
vupen.com/english/advisories/2008/3490
mandriva.com/security/advisories?name=MDVSA-2009:146
nvd.nist.gov/vuln/detail/CVE-2008-5514
github.com/advisories/GHSA-9m53-2xrc-rq26
security-tracker.debian.org/tracker/CVE-2008-5514