CVE-2019-8337: Marlam Mpop

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

In msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate-verification results are not properly checked.

Affected products

• Marlam Mpop: version 1.4.2 only
• Marlam Msmtp: version 1.8.2 only

Published 2019-02-13. Last modified 2026-06-17.