{"id":"CVE-2026-94184","aliases":["ALSA-2026:85959","ALSA-2026:86981","ALSA-2026:86982","AZL-105066","DEBIAN-CVE-2026-94184","EUVD-2026-83923","GHSA-5pfw-5pv2-2pc6","OESA-2026-4206","OESA-2026-4207","OESA-2026-4208","OESA-2026-4209","RLSA-2026:85959","RLSA-2026:86981","RLSA-2026:86982","SUSE-SU-2026:24221-1","SUSE-SU-2026:4567-1","SUSE-SU-2026:4604-1","SUSE-SU-2026:4605-1","UBUNTU-CVE-2026-94184","USN-9013-1","openSUSE-SU-2026:12115-1","openSUSE-SU-2026:22077-1"],"status":"published","title":"Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01195,"percentile":0.68325,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121"],"published":"2026-09-21T14:17:16Z","modified":"2026-11-11T12:59:08Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"fetchmail","fixed_in":["6.4.38-3.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"fetchmail","fixed_in":["6.4.24-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"fetchmail","fixed_in":["6.4.24-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"fetchmail","fixed_in":["6.6.8-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"fetchmail","fixed_in":["6.4.37-3.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"fetchmail","fixed_in":["6.4.22-4.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"fetchmail","fixed_in":["6.4.37-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"fetchmail","fixed_in":["6.4.37-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"fetchmail","fixed_in":["0:6.4.38-3.el10_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"fetchmail","fixed_in":["0:6.4.24-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"fetchmail","fixed_in":["0:6.4.24-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"fetchmail","fixed_in":["6.5.2-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"fetchmail","fixed_in":["6.5.2-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"fetchmail","fixed_in":["6.3.26-13.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"fetchmail","fixed_in":["6.3.26-13.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"fetchmail","fixed_in":["6.4.22-150600.35.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"fetchmail","fixed_in":["6.4.22-150600.35.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"fetchmail","fixed_in":["6.4.22-150600.35.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"fetchmail","fixed_in":["6.4.22-150600.35.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"fetchmail","fixed_in":["6.4.22-150000.20.32.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fetchmail","fixed_in":["6.3.26-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"fetchmail","fixed_in":["6.3.26-3ubuntu0.1~18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"fetchmail","fixed_in":["6.4.2-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"fetchmail","fixed_in":["6.4.27-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"fetchmail","fixed_in":["6.4.38-1ubuntu4.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"fetchmail","fixed_in":["6.6.6-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"fetchmail","fixed_in":["6.6.2-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"fetchmail","fixed_in":["6.6.8-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"fetchmail","fixed_in":["6.5.2-160000.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.38-3.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.24-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.24-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.4.39-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.37-1","6.4.38-1","6.4.39-1","6.5.6-1","6.5.6-2","6.5.7-1","6.6.0-1","6.6.1-1","6.6.2-1","6.6.2-2","6.6.2-3","6.6.3-1","6.6.3-2","6.6.3-3","6.6.6-1","6.6.8-1","6.6.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.39-1","6.5.6-1","6.5.6-2","6.5.7-1","6.6.0-1","6.6.1-1","6.6.2-1","6.6.2-2","6.6.2-3","6.6.3-1","6.6.3-2","6.6.3-3","6.6.6-1","6.6.8-1","6.6.9-1"]},{"source":"osv","ecosystem":"Debian:14","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.8-1"}]}],"versions":["6.4.39-1","6.5.6-1","6.5.6-2","6.5.7-1","6.6.0-1","6.6.1-1","6.6.2-1","6.6.2-2","6.6.2-3","6.6.3-1","6.6.3-2","6.6.3-3","6.6.6-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.37-3.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-4.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.37-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.37-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.38-3.el10_2.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.24-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.24-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.26-13.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.26-13.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150600.35.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150600.35.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150600.35.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150600.35.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.22-150000.20.32.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.26-2ubuntu0.1~esm1"}]}],"versions":["6.3.26-1","6.3.26-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.26-3ubuntu0.1~18.04.1+esm1"}]}],"versions":["6.3.26-3","6.3.26-3build1","6.3.26-3ubuntu0.1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-2ubuntu0.1~esm1"}]}],"versions":["6.4.0~rc4-1ubuntu1","6.4.1-1ubuntu1","6.4.2-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.27-1ubuntu0.2"}]}],"versions":["6.4.22-1","6.4.23-1","6.4.24-1","6.4.25-1","6.4.26-1","6.4.27-1","6.4.27-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.38-1ubuntu4.2"}]}],"versions":["6.4.37-1","6.4.38-1ubuntu1","6.4.38-1ubuntu3","6.4.38-1ubuntu4","6.4.38-1ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.6-1ubuntu0.1"}]}],"versions":["6.6.2-2","6.6.3-3","6.6.6-1","6.6.6-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.2-2ubuntu0.1"}]}],"versions":["6.5.4-0ubuntu2","6.5.4-0ubuntu3","6.6.2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.26-2ubuntu0.1~esm1"}]}],"versions":["6.3.26-1","6.3.26-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.26-3ubuntu0.1~18.04.1+esm1"}]}],"versions":["6.3.26-3","6.3.26-3build1","6.3.26-3ubuntu0.1~18.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-2ubuntu0.1~esm1"}]}],"versions":["6.4.0~rc4-1ubuntu1","6.4.1-1ubuntu1","6.4.2-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.27-1ubuntu0.2"}]}],"versions":["6.4.22-1","6.4.23-1","6.4.24-1","6.4.25-1","6.4.26-1","6.4.27-1","6.4.27-1ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.38-1ubuntu4.2"}]}],"versions":["6.4.37-1","6.4.38-1ubuntu1","6.4.38-1ubuntu3","6.4.38-1ubuntu4","6.4.38-1ubuntu4.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.6-1ubuntu0.1"}]}],"versions":["6.6.2-2","6.6.3-3","6.6.6-1","6.6.6-1build1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.2-2ubuntu0.1"}]}],"versions":["6.5.4-0ubuntu2","6.5.4-0ubuntu3","6.6.2-2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.8-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"fetchmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-160000.4.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:85959","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:86981","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:86982","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:98480","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:98583","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-94184","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2537395","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.com/fetchmail/fetchmail/-/commit/cb5be5c38471eec19e519ace0bc569176317ea92","tags":["fix"]},{"url":"https://www.fetchmail.info/fetchmail-SA-2026-01.txt","tags":["web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/27/8","tags":["web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/09/23/1","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94184","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5pfw-5pv2-2pc6"},{"url":"https://bugzilla.redhat.com/2537395","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-85959.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-86981.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-86982.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94184.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-94184","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4206","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4207","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4208","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4209","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:85959","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:86981","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:86982","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624221-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1282055","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-94184","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264567-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264604-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264605-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-94184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-94184","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-9013-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-36386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-61962","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-94184","title":"Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T14:17:16.053Z","modified":"2026-11-11T12:59:08.061Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-121"],"updated_at":"2026-11-11T13:28:05.136075Z"}],"euvd":[{"id":"EUVD-2026-83923","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T14:17:16Z","modified":"2026-11-11T12:03:36Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-11T13:28:41.983834Z"}],"ghsa":[{"id":"GHSA-5pfw-5pv2-2pc6","title":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A...","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T15:32:05Z","modified":"2026-10-21T15:43:39Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:14:11.937937Z"}],"nvd":[{"id":"CVE-2026-94184","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T15:17:38.547Z","modified":"2026-11-06T02:18:00.317Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-06T06:59:05.647867Z"}],"osv":[{"id":"CVE-2026-94184","title":"Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T14:17:16.053Z","modified":"2026-11-07T07:06:37.54768418Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-121"],"updated_at":"2026-11-07T03:08:12.44191Z"},{"id":"DEBIAN-CVE-2026-94184","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T15:17:38.547Z","modified":"2026-10-23T18:05:05.094647933Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:46:06.846102Z"},{"id":"OESA-2026-4206","title":"fetchmail security update","description":"Fetchmail is a mail retrieval daemon that can download messages from POP3, IMAP, ODMR and ETRN-based stores, with SSL/TLS security including certificate verification, and pass downloaded mail to a local SMTP or LMTP server, or a message delivery agent such as maildrop.\r\n\r\nSecurity Fix(es):\n\nA stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.\n\nAffects v5.0.8 through v6.6.6.(CVE-2026-94184)","status":"published","published":"2026-09-30T13:47:36Z","modified":"2026-10-01T02:00:06.758370294Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4207","title":"fetchmail security update","description":"Fetchmail is a mail retrieval daemon that can download messages from POP3, IMAP, ODMR and ETRN-based stores, with SSL/TLS security including certificate verification, and pass downloaded mail to a local SMTP or LMTP server, or a message delivery agent such as maildrop.\r\n\r\nSecurity Fix(es):\n\nA stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.\n\nAffects v5.0.8 through v6.6.6.(CVE-2026-94184)","status":"published","published":"2026-09-30T13:47:37Z","modified":"2026-10-01T02:00:07.325118053Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4208","title":"fetchmail security update","description":"Fetchmail is a mail retrieval daemon that can download messages from POP3, IMAP, ODMR and ETRN-based stores, with SSL/TLS security including certificate verification, and pass downloaded mail to a local SMTP or LMTP server, or a message delivery agent such as maildrop.\r\n\r\nSecurity Fix(es):\n\nA stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.\n\nAffects v5.0.8 through v6.6.6.(CVE-2026-94184)","status":"published","published":"2026-09-30T13:47:37Z","modified":"2026-10-01T02:00:09.681317085Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4209","title":"fetchmail security update","description":"Fetchmail is a mail retrieval daemon that can download messages from POP3, IMAP, ODMR and ETRN-based stores, with SSL/TLS security including certificate verification, and pass downloaded mail to a local SMTP or LMTP server, or a message delivery agent such as maildrop.\r\n\r\nSecurity Fix(es):\n\nA stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.\n\nAffects v5.0.8 through v6.6.6.(CVE-2026-94184)","status":"published","published":"2026-09-30T13:47:38Z","modified":"2026-10-01T02:00:08.923428649Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RLSA-2026:85959","title":"Moderate: fetchmail security update","description":"Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.\n\nSecurity Fix(es):\n\n* fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-22T00:08:23.571327Z","modified":"2026-10-22T00:30:04.394336612Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:86981","title":"Moderate: fetchmail security update","description":"Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.\n\nSecurity Fix(es):\n\n* fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-22T00:04:07.745746Z","modified":"2026-10-22T00:30:02.628745695Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:86982","title":"Moderate: fetchmail security update","description":"Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.\n\nSecurity Fix(es):\n\n* fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-22T00:01:17.335044Z","modified":"2026-10-22T00:30:02.626983724Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-94184","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T15:17:00Z","modified":"2026-11-11T09:41:50.475450052Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-11T10:03:46.098752Z"},{"id":"ALSA-2026:85959","title":"Moderate: fetchmail security update","description":"Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.  \n\nSecurity Fix(es):  \n\n  * fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-20T00:00:00Z","modified":"2026-10-29T11:31:00.398547416Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:86981","title":"Moderate: fetchmail security update","description":"Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.  \n\nSecurity Fix(es):  \n\n  * fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-21T00:00:00Z","modified":"2026-10-29T11:32:38.650323861Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:86982","title":"Moderate: fetchmail security update","description":"Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.  \n\nSecurity Fix(es):  \n\n  * fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-21T00:00:00Z","modified":"2026-10-29T11:02:25.308999323Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-105066","title":"CVE-2026-94184 affecting package fetchmail 6.4.39-2","description":"A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.","status":"published","published":"2026-09-21T15:17:38Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:17.719431Z"},{"id":"openSUSE-SU-2026:12115-1","title":"fetchmail-6.6.8-1.1 on GA media","description":"These are all security issues fixed in the fetchmail-6.6.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-13T00:00:00Z","modified":"2026-10-14T17:23:09.658107844Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22077-1","title":"Security update for fetchmail","description":"This update for fetchmail fixes the following issue:\n\n- CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process\n  termination (bsc#1282055).\n","status":"published","published":"2026-10-09T12:45:38Z","modified":"2026-10-19T17:23:13.497156786Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:24221-1","title":"Security update for fetchmail","description":"This update for fetchmail fixes the following issue:\n\n- CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process\n  termination (bsc#1282055).\n","status":"published","published":"2026-10-09T12:49:53Z","modified":"2026-10-21T17:23:14.834030352Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4567-1","title":"Security update for fetchmail","description":"This update for fetchmail fixes the following issue:\n\n- CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process\n  termination (bsc#1282055).\n","status":"published","published":"2026-10-07T15:23:21Z","modified":"2026-10-08T19:15:04.711908118Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4604-1","title":"Security update for fetchmail","description":"This update for fetchmail fixes the following issue:\n\n- CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process\n  termination (bsc#1282055).\n","status":"published","published":"2026-10-09T09:59:25Z","modified":"2026-10-09T18:15:03.740757208Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4605-1","title":"Security update for fetchmail","description":"This update for fetchmail fixes the following issue:\n\n- CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process\n  termination (bsc#1282055).\n","status":"published","published":"2026-10-09T10:00:34Z","modified":"2026-10-09T18:15:04.423951599Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-9013-1","title":"fetchmail vulnerabilities","description":"Christian Herdtweck discovered that Fetchmail incorrectly handled certain\nlong log messages. A remote attacker could possibly use this issue to cause\nFetchmail to crash, resulting in a denial of service. This issue only\naffected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2021-36386)\n\nIt was discovered that the Fetchmail SMTP client incorrectly handled\ncertain status code messages. An attacker controlling a malicious server\ncould possibly use this issue to cause Fetchmail to crash, resulting in a\ndenial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, and Ubuntu 20.04 LTS. (CVE-2025-61962)\n\nTristan Madani discovered that Fetchmail incorrectly handled certain NTLM\nauthentication challenges. A remote attacker could possibly use this issue\nto cause Fetchmail to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. The default compiler options for affected releases\nshould reduce the vulnerability to a denial of service. (CVE-2026-94184)","status":"published","published":"2026-11-09T17:17:55Z","modified":"2026-11-11T09:34:56.351462059Z","updated_at":"2026-11-10T03:21:46.325253Z"}]}}