PatchTheCVEsylpheed project vulnerabilities
Recent CVEs affecting sylpheed project products. 2 tracked.
sylpheed project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-07-30. Highest priority: CVE-2017-17517 (score 48/100).
- CVE-2021-37746 MEDIUM 6.1 UPGRADE UPGRADE textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not ha
- CVE-2017-17517 HIGH 8.8 UPGRADE libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by t
FAQ
How do I fix sylpheed project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sylpheed project being exploited right now?
None of the tracked sylpheed project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sylpheed project CVE should I patch first?
CVE-2017-17517 currently ranks highest (48/100): libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by t.