UBUNTU-CVE-2026-100701

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-100701
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-100701.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-100701
Upstream
Published
2026-09-26T14:16:00Z
Modified
2026-09-30T21:41:52Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by the DNS host, while each cache entry also stores the caller-specific TLS servername. When two direct TLS/SMTPS transports (secure: true) resolve the same non-IP host with different tls.servername values, the first transport's servername is returned on the cache hit and overwrites the second transport's explicitly configured value, so Nodemailer sends the wrong SNI value and validates the peer certificate against the wrong identity. In multi-tenant services or SNI-routed SMTP gateways, an attacker who can prime the cache can cause a victim transport to connect to the attacker's TLS virtual host and accept the attacker's certificate even with rejectUnauthorized: true, disclosing the victim's SMTP credentials. Fixed in 10.0.2.

References

Affected packages

Ubuntu:20.04:LTS / node-nodemailer

Package

Name
node-nodemailer
Purl
pkg:deb/ubuntu/node-nodemailer?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.3.0-2
6.3.1-1
6.4.0-1
6.4.1-1
6.4.2-1
6.4.5-1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "node-nodemailer",
            "binary_version":  "6.4.5-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-100701.json"

Ubuntu:22.04:LTS / node-nodemailer

Package

Name
node-nodemailer
Purl
pkg:deb/ubuntu/node-nodemailer?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.4.17-3
6.7.0-1
6.7.0-2
6.7.1+~6.4.4-1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "node-nodemailer",
            "binary_version":  "6.7.1+~6.4.4-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-100701.json"

Ubuntu:24.04:LTS / node-nodemailer

Package

Name
node-nodemailer
Purl
pkg:deb/ubuntu/node-nodemailer?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.9.4+~6.4.9-2
6.9.4+~6.4.9-3ubuntu1
6.9.4+~6.4.9-4

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "node-nodemailer",
            "binary_version":  "6.9.4+~6.4.9-4"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-100701.json"

Ubuntu:26.04:LTS / node-nodemailer

Package

Name
node-nodemailer
Purl
pkg:deb/ubuntu/node-nodemailer?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

7.*
7.0.5+~7.0.1-1
7.0.9+~7.0.2-2
7.0.10+~7.0.2-1
7.0.12+~7.0.5-1
8.*
8.0.4+~7.0.11-1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "node-nodemailer",
            "binary_version":  "8.0.4+~7.0.11-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-100701.json"