CVE-2010-1167: Fetchmail

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list.

Affected products

• Fetchmail Fetchmail: up to and including 6.3.9; version 4.6.3 only; version 4.6.4 only; version 4.6.5 only; version 4.6.6 only; version 4.6.7 only; …

Published 2010-05-07. Last modified 2026-06-16.