PatchTheCVEqmail vulnerabilities and fixes
Recent CVEs affecting qmail, with upgrade or downgrade steps. 3 tracked.
qmail has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2005-05-11. Highest priority: CVE-2005-1513 (score 73/100).
- CVE-2005-1515 MEDIUM 5.0 MITIGATE Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platform
- CVE-2005-1514 MEDIUM 5.0 MITIGATE commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote att
- CVE-2005-1513 CRITICAL 9.8 MITIGATE MITIGATE Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large am
FAQ
How do I fix qmail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qmail being exploited right now?
None of the tracked qmail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qmail CVE should I patch first?
CVE-2005-1513 currently ranks highest (73/100): Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large am.