CVE-2026-94184
- Source
- https://cve.org/CVERecord?id=CVE-2026-94184
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94184.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-94184
- Downstream
AZL (1)
DEBIAN (1)
openSUSE (1)
UBUNTU (1)
- Related
- Published
- 2026-09-21T14:17:16Z
- Modified
- 2026-10-14T17:27:26Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)
- Details
-
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.
- Database specific
{ "cna_assigner": "redhat", "cwe_ids": [ "CWE-121" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94184.json" }- References
-
- http://www.openwall.com/lists/oss-security/2026/09/23/1
- https://access.redhat.com/downloads/content/package-browser/
- https://www.fetchmail.info/fetchmail-SA-2026-01.txt
- https://www.openwall.com/lists/oss-security/2026/06/27/8
- https://access.redhat.com/security/cve/CVE-2026-94184
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94184.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-94184
- https://bugzilla.redhat.com/show_bug.cgi?id=2531984
- https://bugzilla.redhat.com/show_bug.cgi?id=2537395
- https://gitlab.com/fetchmail/fetchmail/-/commit/cb5be5c38471eec19e519ace0bc569176317ea92
Affected packages
Git / gitlab.com/fetchmail/fetchmail
Affected versions
6.*
6.5.0
6.5.0.beta1
6.5.0.beta10
6.5.0.beta2
6.5.0.beta3
6.5.0.beta4
6.5.0.beta5
6.5.0.beta6
6.5.0.beta7
6.5.0.beta8
6.5.0.beta9
6.5.0.dev20200711a
6.5.0.dev20200711b
6.5.0.rc1
6.5.0.rc2
6.5.1
6.5.1.rc1
6.5.2
6.5.3
6.5.4
6.5.5
6.5.5.rc1
6.5.6
6.5.7.rc1
6.6.0
6.6.0.rc1
6.6.0.rc2
6.6.0.rc3
6.6.1
6.6.2
6.6.3
6.6.4
6.6.5
6.6.6
Other
BRANCH_6-3
RELEASE_1-0-0
RELEASE_1-8-0
RELEASE_1-9-0
RELEASE_1-9-2
RELEASE_1-9-3
RELEASE_1-9-4
RELEASE_1-9-5
RELEASE_1-9-6
RELEASE_1-9-8
RELEASE_1-9-9
RELEASE_1-9a
RELEASE_2-0-0
RELEASE_2-1-0
RELEASE_2-1-1
RELEASE_2-1-2
RELEASE_2-1-3
RELEASE_2-2-0
RELEASE_2-3-0
RELEASE_2-4-0
RELEASE_2-4-0bis
RELEASE_2-6-0
RELEASE_2-7-0
RELEASE_2-8-0
RELEASE_2-8bis
RELEASE_2-8tris
RELEASE_3-0-0
RELEASE_3-3-0
RELEASE_3-3-1
RELEASE_3-4-0
RELEASE_3-5-0
RELEASE_3-6-0
RELEASE_3-7-0
RELEASE_3-8-0
RELEASE_3-9-0
RELEASE_3-9-1
RELEASE_3-9-2
RELEASE_3-9-3
RELEASE_3-9-4
RELEASE_3-9-5
RELEASE_3-9-6
RELEASE_3-9-7
RELEASE_3-9-8
RELEASE_4-0-0
RELEASE_4-0-0bis
RELEASE_4-0-1
RELEASE_4-0-3
RELEASE_4-0-4
RELEASE_4-0-5
RELEASE_4-0-8
RELEASE_4-1-0
RELEASE_4-1-1
RELEASE_4-1-2
RELEASE_4-1-5
RELEASE_4-1-6
RELEASE_4-1-7
RELEASE_4-1-8
RELEASE_4-2-0
RELEASE_4-2-1
RELEASE_4-2-3
RELEASE_4-2-4
RELEASE_4-2-5
RELEASE_4-2-6
RELEASE_4-2-7
RELEASE_4-2-9
RELEASE_4-3-0
RELEASE_4-3-1
RELEASE_4-3-2
RELEASE_4-3-3
RELEASE_4-3-4
RELEASE_4-3-5
RELEASE_4-3-6
RELEASE_4-3-7
RELEASE_4-3-8
RELEASE_4-3-8bis
RELEASE_4-3-9
RELEASE_4-4-0
RELEASE_4-4-2
RELEASE_4-4-3
RELEASE_4-4-4
RELEASE_4-4-5
RELEASE_4-4-5bis
RELEASE_4-4-6
RELEASE_4-4-6bis
RELEASE_4-4-7
RELEASE_4-4-8
RELEASE_4-4-9
RELEASE_4-5-0
RELEASE_4-5-0bis
RELEASE_4-5-1
RELEASE_4-5-2
RELEASE_4-5-3
RELEASE_4-5-4
RELEASE_4-5-5
RELEASE_4-5-6
RELEASE_4-5-7
RELEASE_4-5-8
RELEASE_4-6-0
RELEASE_4-6-1
RELEASE_4-6-2
RELEASE_4-6-3
RELEASE_4-6-4
RELEASE_4-6-5
RELEASE_4-6-6
RELEASE_4-6-7
RELEASE_4-6-8
RELEASE_4-6-9
RELEASE_4-7-0
RELEASE_4-7-1
RELEASE_4-7-2
RELEASE_4-7-3
RELEASE_4-7-4
RELEASE_4-7-5
RELEASE_4-7-6
RELEASE_4-7-7
RELEASE_4-7-8
RELEASE_4-7-9
RELEASE_5-0-0
RELEASE_5-0-2
RELEASE_5-0-3
RELEASE_5-0-4
RELEASE_5-0-5
RELEASE_5-0-6
RELEASE_5-0-7
RELEASE_5-0-8
RELEASE_5-1-1
RELEASE_5-1-2
RELEASE_5-1-3
RELEASE_5-1-4
RELEASE_5-2-3
RELEASE_5-2-4
RELEASE_5-2-5
RELEASE_5-2-6
RELEASE_5-2-7
RELEASE_5-2-8
RELEASE_5-3-0
RELEASE_5-3-1
RELEASE_5-3-3
RELEASE_5-3-4
RELEASE_5-3-5
RELEASE_5-3-6
RELEASE_5-3-7
RELEASE_5-3-8
RELEASE_5-4-0
RELEASE_5-4-1
RELEASE_5-4-3
RELEASE_5-4-4
RELEASE_5-4-5
RELEASE_5-5-0
RELEASE_5-5-1
RELEASE_5-5-2
RELEASE_5-5-3
RELEASE_5-5-4
RELEASE_5-5-5
RELEASE_5-5-6
RELEASE_5-6-0
RELEASE_5-6-1
RELEASE_5-6-2
RELEASE_5-6-4
RELEASE_5-6-5
RELEASE_5-6-6
RELEASE_5-6-7
RELEASE_5-6-8
RELEASE_5-7-0
RELEASE_5-7-1
RELEASE_5-7-2
RELEASE_5-7-3
RELEASE_5-7-4
RELEASE_5-7-5
RELEASE_5-7-6
RELEASE_5-7-7
RELEASE_5-8-10
RELEASE_5-8-11
RELEASE_5-8-12
RELEASE_5-8-15
RELEASE_5-8-16
RELEASE_5-8-17
RELEASE_5-8-3
RELEASE_5-8-4
RELEASE_5-8-5
RELEASE_5-8-7
RELEASE_5-8-8
RELEASE_5-9-0
RELEASE_5-9-1
RELEASE_5-9-10
RELEASE_5-9-11
RELEASE_5-9-12
RELEASE_5-9-13
RELEASE_5-9-14
RELEASE_5-9-2
RELEASE_5-9-3
RELEASE_5-9-5
RELEASE_5-9-6
RELEASE_5-9-7
RELEASE_5-9-9
RELEASE_6-0-0
RELEASE_6-1-0
RELEASE_6-1-1
RELEASE_6-1-2
RELEASE_6-1-3
RELEASE_6-2-0
RELEASE_6-2-1
RELEASE_6-2-2
RELEASE_6-2-3
RELEASE_6-2-4
RELEASE_6-2-5
RELEASE_6-3-0
RELEASE_6-3-1
RELEASE_6-3-10
RELEASE_6-3-11
RELEASE_6-3-12
RELEASE_6-3-13
RELEASE_6-3-14
RELEASE_6-3-15
RELEASE_6-3-16
RELEASE_6-3-17
RELEASE_6-3-18
RELEASE_6-3-19
RELEASE_6-3-2
RELEASE_6-3-20
RELEASE_6-3-21
RELEASE_6-3-22
RELEASE_6-3-23
RELEASE_6-3-24
RELEASE_6-3-25
RELEASE_6-3-26
RELEASE_6-3-2_4678
RELEASE_6-3-3
RELEASE_6-3-4
RELEASE_6-3-5
RELEASE_6-3-6
RELEASE_6-3-7
RELEASE_6-3-8
RELEASE_6-3-8_5093
RELEASE_6-3-9
RELEASE_6-3-9_5248
SNAPSHOT-6-5-0-beta2
SNAPSHOT-6_2_6-pre5
SNAPSHOT-6_2_6-pre6
SNAPSHOT-6_2_6-pre7
SNAPSHOT-6_2_6-pre8
SNAPSHOT-6_2_6-pre9
SNAPSHOT-6_2_9-rc1
SNAPSHOT-6_2_9-rc10
SNAPSHOT-6_2_9-rc2
SNAPSHOT-6_2_9-rc3
SNAPSHOT-6_2_9-rc4
SNAPSHOT-6_2_9-rc5
SNAPSHOT-6_2_9-rc6
SNAPSHOT-6_2_9-rc7
SNAPSHOT-6_2_9-rc8
SNAPSHOT-6_2_9-rc9
SNAPSHOT-6_4_0_beta2
SNAPSHOT-6_4_0_beta3
SNAPSHOT-6_4_0_beta4
SNAPSHOT-6_4_0_beta5
SNAPSHOT-6_4_0_rc1
SNAPSHOT-6_4_0_rc2
SNAPSHOT-6_4_0_rc3
SNAPSHOT_6-2-6-pre3
SNAPSHOT_6-2-6-pre4
SNAPSHOT_6-3-1-rc1
SNAPSHOT_6-3-10-beta1
SNAPSHOT_6-3-15-beta1
SNAPSHOT_6-3-15-beta2
SNAPSHOT_6-3-15-beta3
SNAPSHOT_6-3-17-pre1
SNAPSHOT_6-3-18-pre1
SNAPSHOT_6-3-18-pre2
SNAPSHOT_6-3-19-pre1
SNAPSHOT_6-3-2-rc1
SNAPSHOT_6-3-2-rc2
SNAPSHOT_6-3-2-rc3
SNAPSHOT_6-3-2-rc4
SNAPSHOT_6-3-20-pre1
SNAPSHOT_6-3-20-rc2
SNAPSHOT_6-3-20-rc3
SNAPSHOT_6-3-3-rc1
SNAPSHOT_6-3-3-rc2
SNAPSHOT_6-3-4-rc1
SNAPSHOT_6-3-4-rc2
SNAPSHOT_6-3-5-beta1
SNAPSHOT_6-3-5-beta2
SNAPSHOT_6-3-5-beta3
SNAPSHOT_6-3-6-rc1
SNAPSHOT_6-3-6-rc2
SNAPSHOT_6-3-6-rc3
SNAPSHOT_6-3-6-rc4
SNAPSHOT_6-3-6-rc5
SNAPSHOT_6-3-7-rc1
SNAPSHOT_6-3-8-rc1
SNAPSHOT_6-3-8-rc2
SNAPSHOT_6-3-8-rc3
SNAPSHOT_6-3-9-rc1
SNAPSHOT_6-3-9-rc2
SNAPSHOT_6-3-9-rc3
SNAPSHOT_6-5-0-beta1
SNAPSHOT_6-5-0-beta3
SNAPSHOT_6-5-0-beta4
SNAPSHOT_6-5-0-beta5
SNAPSHOT_6-5-0-beta6
badmerge
before-automake
p302a
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94184.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"269955127676702051293144825163036104039",
"217869896827177452158881211404716628645",
"159999900658711313460824722277119124801",
"251327290983566449902915156862697823699",
"46745935269233251296104944845216564598",
"174645491123638745416762500745458121923",
"261600919438256111107148350578077639250",
"274046884210316428695891311488555327114",
"187988963646718133500511351019194419609",
"21555501714842048290954554064512678569",
"79290483740429779569763310764462948479"
],
"threshold": 0.9
},
"id": "CVE-2026-94184-3fd93a2d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://gitlab.com/fetchmail/fetchmail@cb5be5c38471eec19e519ace0bc569176317ea92",
"target": {
"file": "smbutil.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "325383575630300030983862053417842054775",
"length": 463
},
"id": "CVE-2026-94184-6ae73e49",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://gitlab.com/fetchmail/fetchmail@cb5be5c38471eec19e519ace0bc569176317ea92",
"target": {
"file": "smbutil.c",
"function": "buildSmbNtlmAuthRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "222905908714677541548851923291282033183",
"length": 875
},
"id": "CVE-2026-94184-f55be1ec",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://gitlab.com/fetchmail/fetchmail@cb5be5c38471eec19e519ace0bc569176317ea92",
"target": {
"file": "smbutil.c",
"function": "buildSmbNtlmAuthResponse"
}
}
]
vanir_signatures_modified
"2026-10-03T08:03:11Z"