Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 3 products
@halvarflake It only took 15 years to exploit CVE-2005-1513, surely a 64-bit one will take less than that because we are nearing singularity, or so they say
Post summary
The tweet comments that the CVE was exploited after 15 years but provides no technical or operational detail.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | canonical | ubuntu_linux | 20.04 | - | - |
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 8.0 | - | - |
| OS | debian | debian_linux | 9.0 | - | - |
| App | qmail_project | qmail | - | - | - |