CVE-2010-4532: Debian Linux

Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days.

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Offlineimap Offlineimap: before 6.3.2 (fixed in 6.3.2)

Published 2019-11-13. Last modified 2026-06-16.