diff options
| author | Guido Falsi <madpilot@FreeBSD.org> | 2026-07-09 06:55:21 +0000 |
|---|---|---|
| committer | Guido Falsi <madpilot@FreeBSD.org> | 2026-07-09 06:55:21 +0000 |
| commit | cb6184e0071b1bc0f4bd55b3a51a3eaefc46aafb (patch) | |
| tree | 3c07cafa01e53e88e5c2efb9c1e07c6d32f89e6a | |
| parent | 26c93ebb2487dd399ff9bdf8de40137ccf1bd975 (diff) | |
security/vuxml: Report new mail/mailpit vulnerabilities
| -rw-r--r-- | security/vuxml/vuln/2026.xml | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index d3f7d5e3284b..da4d2418030e 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,45 @@ + <vuln vid="7a56b0f7-7b62-11f1-8a70-10ffe07f9334"> + <topic>mailpit -- multiple vulnerabilities</topic> + <affects> + <package> + <name>mailpit</name> + <range><lt>1.30.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Mailpit author reports:</p> + <blockquote cite="https://github.com/axllent/mailpit/releases/tag/v1.30.4"> + <p>Mailpit's SMTP server reads each command line with an + unbounded bufio.Reader.ReadString('\n') before parsing + the command or enforcing any protocol length limit. A + remote SMTP client can send an oversized single command + line and force Mailpit to allocate attacker-controlled + memory before the server returns a syntax error or times + out, even though RFC 5321 limits SMTP command lines to + 512 octets including CRLF.</p> + <p>Mailpit's thumbnail endpoint decodes attacker-supplied + image attachments into a full raster before checking any + decoded-pixel, dimension, or memory budget. A remote + client that can store an email and reach the default web + API can supply a compact high-dimension image, then request + <code>/api/v1/message/{id}/part/{partID}/thumb</code> to + force server-side memory and CPU work far larger than the + encoded attachment size before Mailpit returns a 180x120 + thumbnail.</p> + </blockquote> + </body> + </description> + <references> + <url>https://github.com/axllent/mailpit/security/advisories/GHSA-w878-pj84-3j5v</url> + <url>https://github.com/axllent/mailpit/security/advisories/GHSA-75mr-qw9x-3r39</url> + </references> + <dates> + <discovery>2026-07-09</discovery> + <entry>2026-07-09</entry> + </dates> + </vuln> + <vuln vid="84ce0c0c-7b4e-11f1-9c40-2cf05da270f3"> <topic>Gitlab -- Vulnerabilities</topic> <affects> |