DEBIAN-CVE-2026-4371

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2026-4371

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4371.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-4371

Upstream

CVE-2026-4371

Downstream

DLA-4511-1

DSA-6179-1

Published

2026-03-24T21:16:29Z

Modified

2026-09-14T17:03:12Z

Severity

7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator

Summary

[none]

Details

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.

References

https://security-tracker.debian.org/tracker/CVE-2026-4371

Affected packages

Debian:12 / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/debian/thunderbird?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1:140.9.0esr-1~deb12u1

Affected versions

1:102.*

1:102.11.0-1

1:102.12.0-1~deb10u1

1:102.12.0-1~deb11u1

1:102.12.0-1~deb12u1

1:102.12.0-1

1:102.13.0-1~deb10u1

1:102.13.0-1~deb11u1

1:102.13.0-1~deb12u1

1:102.13.0-1

1:102.13.1-1~deb10u1

1:102.13.1-1~deb11u1

1:102.13.1-1~deb12u1

1:102.13.1-1

1:102.14.0-1~deb10u1

1:102.14.0-1~deb11u1

1:102.14.0-1~deb12u1

1:102.15.0-1~deb10u1

1:102.15.0-1~deb11u1

1:102.15.0-1~deb12u1

1:102.15.1-1~deb10u1

1:102.15.1-1~deb11u1

1:102.15.1-1~deb12u1

1:103.*

1:103.0~b5-1

1:104.*

1:104.0~b2-1

1:110.*

1:110.0~b4-1

1:112.*

1:112.0~b1-1

1:113.*

1:113.0~b3-1

1:114.*

1:114.0~b2-1

1:115.*

1:115.0~b4-1

1:115.0~b6-1

1:115.0-1

1:115.0.1-1

1:115.0.1-2

1:115.1.0-1

1:115.1.1-1

1:115.2.0-1

1:115.2.2-1

1:115.3.0-1~deb12u1

1:115.3.0-1

1:115.3.1-1~deb10u1

1:115.3.1-1~deb11u1

1:115.3.1-1~deb12u1

1:115.3.1-1

1:115.4.1-1~deb10u1

1:115.4.1-1~deb11u1

1:115.4.1-1~deb12u1

1:115.4.1-1

1:115.5.0-1~deb10u1

1:115.5.0-1~deb11u1

1:115.5.0-1~deb12u1

1:115.5.0-1

1:115.5.1-1

1:115.5.2-1

1:115.6.0-1~deb10u1

1:115.6.0-1~deb11u1

1:115.6.0-1~deb12u1

1:115.6.0-1

1:115.7.0-1~deb10u1

1:115.7.0-1~deb11u1

1:115.7.0-1~deb12u1

1:115.7.0-1

1:115.8.0-1~deb10u1

1:115.8.0-1~deb11u1

1:115.8.0-1~deb12u1

1:115.8.0-1

1:115.8.1-1

1:115.9.0-1~deb10u1

1:115.9.0-1~deb11u1

1:115.9.0-1~deb12u1

1:115.9.0-1

1:115.10.1-1~deb10u1

1:115.10.1-1~deb11u1

1:115.10.1-1~deb12u1

1:115.10.1-1

1:115.11.0-1~deb10u1

1:115.11.0-1~deb11u1

1:115.11.0-1~deb12u1

1:115.11.0-1

1:115.12.0-1~deb10u1

1:115.12.0-1~deb11u1

1:115.12.0-1~deb12u1

1:115.12.0-1

1:115.13.0-1~deb11u1

1:115.13.0-1~deb12u1

1:115.13.0-1

1:115.14.0-1~deb11u1

1:115.14.0-1~deb12u1

1:115.15.0-1~deb11u1

1:115.15.0-1~deb12u1

1:115.16.0esr-1~deb11u1

1:115.16.0esr-1~deb12u1

1:116.*

1:116.0~b7-1

1:117.*

1:117.0~b5-1

1:120.*

1:120.0~b1-1

1:121.*

1:121.0~b3-1

1:122.*

1:122.0~b2-1

1:124.*

1:124.0~b5-1

1:125.*

1:125.0~b3-1

1:127.*

1:127.0~b5-1

1:128.*

1:128.0~b5-1

1:128.0esr-1

1:128.1.0esr-1

1:128.1.1esr-1

1:128.2.0esr-1

1:128.2.1esr-1

1:128.2.3esr-1

1:128.3.0esr-1

1:128.3.2esr-1

1:128.4.0esr-1~deb11u1

1:128.4.0esr-1~deb12u1

1:128.4.0esr-1

1:128.4.2esr-1

1:128.4.3esr-1~deb11u1

1:128.4.3esr-1~deb12u1

1:128.4.3esr-1

1:128.5.0esr-1~deb11u1

1:128.5.0esr-1~deb12u1

1:128.5.0esr-1

1:128.5.2esr-1

1:128.6.0esr-1~deb11u1

1:128.6.0esr-1~deb12u1

1:128.6.0esr-1

1:128.7.0esr-1~deb11u1

1:128.7.0esr-1~deb12u1

1:128.7.0esr-1

1:128.8.0esr-1~deb11u1

1:128.8.0esr-1~deb12u1

1:128.8.0esr-1

1:128.9.0esr-1~deb11u1

1:128.9.0esr-1~deb12u1

1:128.9.0esr-1

1:128.10.0esr-1~deb11u1

1:128.10.0esr-1~deb12u1

1:128.10.0esr-1

1:128.10.1esr-1~deb11u1

1:128.10.1esr-1~deb12u1

1:128.10.1esr-1

1:128.11.0esr-1~deb11u1

1:128.11.0esr-1~deb12u1

1:128.11.0esr-1

1:128.12.0esr-1~deb11u1

1:128.12.0esr-1~deb12u1

1:128.12.0esr-1

1:128.13.0esr-1~deb11u1

1:128.13.0esr-1~deb12u1

1:128.13.0esr-1

1:128.14.0esr-1~deb11u1

1:128.14.0esr-1~deb12u1

1:128.14.0esr-1~deb13u1

1:128.14.0esr-1

1:129.*

1:129.0~b6-1

1:130.*

1:130.0~b3-1

1:132.*

1:132.0~b6-1

1:135.*

1:135.0-1

1:136.*

1:136.0-1

1:137.*

1:137.0-1

1:138.*

1:138.0-1

1:140.*

1:140.0.1esr-1

1:140.1.0esr-1

1:140.1.1esr-1

1:140.2.0esr-1

1:140.3.0esr-1~deb11u1

1:140.3.0esr-1~deb12u1

1:140.3.0esr-1~deb13u1

1:140.3.0esr-1

1:140.3.1esr-1

1:140.4.0esr-1~deb11u1

1:140.4.0esr-1~deb12u1

1:140.4.0esr-1~deb13u1

1:140.4.0esr-1

1:140.5.0esr-1~deb11u1

1:140.5.0esr-1~deb12u1

1:140.5.0esr-1~deb13u1

1:140.5.0esr-1

1:140.6.0esr-1~deb11u1

1:140.6.0esr-1~deb12u1

1:140.6.0esr-1~deb13u1

1:140.6.0esr-1

1:140.7.0esr-1~deb11u1

1:140.7.0esr-1~deb12u1

1:140.7.0esr-1~deb13u1

1:140.7.0esr-1

1:140.7.1esr-1~deb11u1

1:140.7.1esr-1~deb12u1

1:140.7.1esr-1~deb13u1

1:140.7.1esr-1

1:140.8.0esr-1~deb11u1

1:140.8.0esr-1~deb12u1

1:140.8.0esr-1~deb13u1

1:140.8.0esr-1

1:140.9.0esr-1~deb11u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4371.json"

Debian:13 / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/debian/thunderbird?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1:140.9.0esr-1~deb13u1

Affected versions

1:128.*

1:128.13.0esr-1

1:128.14.0esr-1~deb11u1

1:128.14.0esr-1~deb12u1

1:128.14.0esr-1~deb13u1

1:128.14.0esr-1

1:129.*

1:129.0~b6-1

1:130.*

1:130.0~b3-1

1:132.*

1:132.0~b6-1

1:135.*

1:135.0-1

1:136.*

1:136.0-1

1:137.*

1:137.0-1

1:138.*

1:138.0-1

1:140.*

1:140.0.1esr-1

1:140.1.0esr-1

1:140.1.1esr-1

1:140.2.0esr-1

1:140.3.0esr-1~deb11u1

1:140.3.0esr-1~deb12u1

1:140.3.0esr-1~deb13u1

1:140.3.0esr-1

1:140.3.1esr-1

1:140.4.0esr-1~deb11u1

1:140.4.0esr-1~deb12u1

1:140.4.0esr-1~deb13u1

1:140.4.0esr-1

1:140.5.0esr-1~deb11u1

1:140.5.0esr-1~deb12u1

1:140.5.0esr-1~deb13u1

1:140.5.0esr-1

1:140.6.0esr-1~deb11u1

1:140.6.0esr-1~deb12u1

1:140.6.0esr-1~deb13u1

1:140.6.0esr-1

1:140.7.0esr-1~deb11u1

1:140.7.0esr-1~deb12u1

1:140.7.0esr-1~deb13u1

1:140.7.0esr-1

1:140.7.1esr-1~deb11u1

1:140.7.1esr-1~deb12u1

1:140.7.1esr-1~deb13u1

1:140.7.1esr-1

1:140.8.0esr-1~deb11u1

1:140.8.0esr-1~deb12u1

1:140.8.0esr-1~deb13u1

1:140.8.0esr-1

1:140.9.0esr-1~deb11u1

1:140.9.0esr-1~deb12u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4371.json"

Debian:14 / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/debian/thunderbird?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1:140.9.0esr-1

Affected versions

1:128.*

1:128.13.0esr-1

1:128.14.0esr-1~deb11u1

1:128.14.0esr-1~deb12u1

1:128.14.0esr-1~deb13u1

1:128.14.0esr-1

1:129.*

1:129.0~b6-1

1:130.*

1:130.0~b3-1

1:132.*

1:132.0~b6-1

1:135.*

1:135.0-1

1:136.*

1:136.0-1

1:137.*

1:137.0-1

1:138.*

1:138.0-1

1:140.*

1:140.0.1esr-1

1:140.1.0esr-1

1:140.1.1esr-1

1:140.2.0esr-1

1:140.3.0esr-1~deb11u1

1:140.3.0esr-1~deb12u1

1:140.3.0esr-1~deb13u1

1:140.3.0esr-1

1:140.3.1esr-1

1:140.4.0esr-1~deb11u1

1:140.4.0esr-1~deb12u1

1:140.4.0esr-1~deb13u1

1:140.4.0esr-1

1:140.5.0esr-1~deb11u1

1:140.5.0esr-1~deb12u1

1:140.5.0esr-1~deb13u1

1:140.5.0esr-1

1:140.6.0esr-1~deb11u1

1:140.6.0esr-1~deb12u1

1:140.6.0esr-1~deb13u1

1:140.6.0esr-1

1:140.7.0esr-1~deb11u1

1:140.7.0esr-1~deb12u1

1:140.7.0esr-1~deb13u1

1:140.7.0esr-1

1:140.7.1esr-1~deb11u1

1:140.7.1esr-1~deb12u1

1:140.7.1esr-1~deb13u1

1:140.7.1esr-1

1:140.8.0esr-1~deb11u1

1:140.8.0esr-1~deb12u1

1:140.8.0esr-1~deb13u1

1:140.8.0esr-1

1:140.9.0esr-1~deb11u1

1:140.9.0esr-1~deb12u1

1:140.9.0esr-1~deb13u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4371.json"