CVE-2011-1947

fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.

• fetchmail fetchmail 5.9.9 • fetchmail fetchmail 5.9.10 • fetchmail fetchmail 5.9.11 • fetchmail fetchmail 5.9.13 • fetchmail fetchmail 6.0.0 • fetchmail fetchmail 6.1.0 • fetchmail fetchmail 6.1.3 • fetchmail fetchmail 6.2.0 • fetchmail fetchmail 6.2.1 • fetchmail fetchmail 6.2.2 • fetchmail fetchmail 6.2.3 • fetchmail fetchmail 6.2.4 • fetchmail fetchmail 6.2.5 • fetchmail fetchmail 6.2.5.1 • fetchmail fetchmail 6.2.5.2 • fetchmail fetchmail 6.2.5.4 • fetchmail fetchmail 6.2.6 • fetchmail fetchmail 6.2.9 • fetchmail fetchmail 6.3.0 • fetchmail fetchmail 6.3.1 • fetchmail fetchmail 6.3.2 • fetchmail fetchmail 6.3.3 • fetchmail fetchmail 6.3.4 • fetchmail fetchmail 6.3.5 • fetchmail fetchmail 6.3.6 • fetchmail fetchmail 6.3.7 • fetchmail fetchmail 6.3.8 • fetchmail fetchmail 6.3.9 • fetchmail fetchmail 6.3.10 • fetchmail fetchmail 6.3.11 • fetchmail fetchmail 6.3.12 • fetchmail fetchmail 6.3.13 • fetchmail fetchmail 6.3.14 • fetchmail fetchmail 6.3.15 • fetchmail fetchmail 6.3.16 • fetchmail fetchmail 6.3.17 • fetchmail fetchmail 6.3.18 • fetchmail fetchmail 6.3.19