DEBIAN-CVE-2008-5514

Source
https://security-tracker.debian.org/tracker/CVE-2008-5514
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2008-5514.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2008-5514
Upstream
Published
2008-12-23T18:30:03.280Z
Modified
2025-11-14T03:05:44.150722Z
Summary
[none]
Details

Off-by-one error in the rfc822outputchar function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.

References

Affected packages

Debian:11

alpine

Package

Name
alpine
Purl
pkg:deb/debian/alpine?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.02-3.1

Ecosystem specific

{
    "urgency": "low"
}

uw-imap

Package

Name
uw-imap
Purl
pkg:deb/debian/uw-imap?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2007b~dfsg-1.1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:12

alpine

Package

Name
alpine
Purl
pkg:deb/debian/alpine?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.02-3.1

Ecosystem specific

{
    "urgency": "low"
}

uw-imap

Package

Name
uw-imap
Purl
pkg:deb/debian/uw-imap?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2007b~dfsg-1.1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:13

alpine

Package

Name
alpine
Purl
pkg:deb/debian/alpine?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.02-3.1

Ecosystem specific

{
    "urgency": "low"
}

Debian:14

alpine

Package

Name
alpine
Purl
pkg:deb/debian/alpine?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.02-3.1

Ecosystem specific

{
    "urgency": "low"
}