AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-94184

Red Hat fetchmail: stack buffer overflow

Red Hat

CVE-2026-94184 · Published Sep 21, 2026 · updated Nov 6, 2026

Medium5.3
No fix yet
Red Hat advisory

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.

Affected versions

PackageAffectedFixed in
Red Hat Enterprise Linux 6
Product
all versionsNo fix yet
Red Hat Enterprise Linux 7
Product
all versionsNo fix yet

Changes since it was listed

CVSS scoreOct 2CVSS score: 8.1 to 5.3
SeverityOct 2Severity: High to Medium
Details and references

More Red Hat advisories

All Red Hat