Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fgbr-mydh-7bhx
SummaryUse-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of service that is possible here is to fill up the disk with core dumps if the OS actually generates different core dumps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process would terminate anyway, no mail delivery or receiption is affected."
Aliases
0
alias CVE-2006-4434
Fixed_packages
0
url pkg:deb/debian/sendmail@8.13.8-1?distro=trixie
purl pkg:deb/debian/sendmail@8.13.8-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.13.8-1%3Fdistro=trixie
1
url pkg:deb/debian/sendmail@8.13.8-3
purl pkg:deb/debian/sendmail@8.13.8-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dk9t-39dj-cud4
1
vulnerability VCID-gycy-hbda-p3ht
2
vulnerability VCID-qzm7-bmk8-9fgf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.13.8-3
2
url pkg:deb/debian/sendmail@8.15.2-22%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/sendmail@8.15.2-22%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u8aq-2qhu-gff5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.15.2-22%252Bdeb11u3%3Fdistro=trixie
3
url pkg:deb/debian/sendmail@8.17.1.9-2%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/sendmail@8.17.1.9-2%2Bdeb12u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.17.1.9-2%252Bdeb12u2%3Fdistro=trixie
4
url pkg:deb/debian/sendmail@8.18.1-6?distro=trixie
purl pkg:deb/debian/sendmail@8.18.1-6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.18.1-6%3Fdistro=trixie
5
url pkg:deb/debian/sendmail@8.18.2-1?distro=trixie
purl pkg:deb/debian/sendmail@8.18.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.18.2-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/sendmail@8.8.8-20
purl pkg:deb/debian/sendmail@8.8.8-20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fjk-gqgc-3yhs
1
vulnerability VCID-3k8z-tghq-cbdh
2
vulnerability VCID-7f7m-pgk8-jqff
3
vulnerability VCID-8g11-dp5v-yycj
4
vulnerability VCID-8g7g-jc7b-f3fd
5
vulnerability VCID-9kez-3pxn-k7gr
6
vulnerability VCID-axw2-9wxf-skes
7
vulnerability VCID-dk9t-39dj-cud4
8
vulnerability VCID-fgbr-mydh-7bhx
9
vulnerability VCID-fm43-r24t-h7ez
10
vulnerability VCID-gycy-hbda-p3ht
11
vulnerability VCID-m7np-crvq-p3dc
12
vulnerability VCID-mngh-1224-uucj
13
vulnerability VCID-p9fa-ter1-3ker
14
vulnerability VCID-pmae-5146-27dt
15
vulnerability VCID-qzm7-bmk8-9fgf
16
vulnerability VCID-rn5g-z7bd-6qbv
17
vulnerability VCID-y9e6-ugss-hbc8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.8.8-20
1
url pkg:deb/debian/sendmail@8.9.3-3slink1
purl pkg:deb/debian/sendmail@8.9.3-3slink1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fjk-gqgc-3yhs
1
vulnerability VCID-3k8z-tghq-cbdh
2
vulnerability VCID-7f7m-pgk8-jqff
3
vulnerability VCID-8g11-dp5v-yycj
4
vulnerability VCID-8g7g-jc7b-f3fd
5
vulnerability VCID-9kez-3pxn-k7gr
6
vulnerability VCID-axw2-9wxf-skes
7
vulnerability VCID-dk9t-39dj-cud4
8
vulnerability VCID-fgbr-mydh-7bhx
9
vulnerability VCID-fm43-r24t-h7ez
10
vulnerability VCID-gycy-hbda-p3ht
11
vulnerability VCID-m7np-crvq-p3dc
12
vulnerability VCID-mngh-1224-uucj
13
vulnerability VCID-p9fa-ter1-3ker
14
vulnerability VCID-pmae-5146-27dt
15
vulnerability VCID-qzm7-bmk8-9fgf
16
vulnerability VCID-rn5g-z7bd-6qbv
17
vulnerability VCID-y9e6-ugss-hbc8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.9.3-3slink1
2
url pkg:deb/debian/sendmail@8.12.3-7.1
purl pkg:deb/debian/sendmail@8.12.3-7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fjk-gqgc-3yhs
1
vulnerability VCID-3k8z-tghq-cbdh
2
vulnerability VCID-7f7m-pgk8-jqff
3
vulnerability VCID-8g11-dp5v-yycj
4
vulnerability VCID-9kez-3pxn-k7gr
5
vulnerability VCID-axw2-9wxf-skes
6
vulnerability VCID-dk9t-39dj-cud4
7
vulnerability VCID-fgbr-mydh-7bhx
8
vulnerability VCID-fm43-r24t-h7ez
9
vulnerability VCID-gycy-hbda-p3ht
10
vulnerability VCID-m7np-crvq-p3dc
11
vulnerability VCID-mngh-1224-uucj
12
vulnerability VCID-p9fa-ter1-3ker
13
vulnerability VCID-pmae-5146-27dt
14
vulnerability VCID-qzm7-bmk8-9fgf
15
vulnerability VCID-y9e6-ugss-hbc8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.12.3-7.1
3
url pkg:deb/debian/sendmail@8.13.4-3sarge3
purl pkg:deb/debian/sendmail@8.13.4-3sarge3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fjk-gqgc-3yhs
1
vulnerability VCID-dk9t-39dj-cud4
2
vulnerability VCID-fgbr-mydh-7bhx
3
vulnerability VCID-gycy-hbda-p3ht
4
vulnerability VCID-m7np-crvq-p3dc
5
vulnerability VCID-qzm7-bmk8-9fgf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sendmail@8.13.4-3sarge3
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4434.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4434.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-4434
reference_id
reference_type
scores
0
value 0.07028
scoring_system epss
scoring_elements 0.91437
published_at 2026-04-01T12:55:00Z
1
value 0.07028
scoring_system epss
scoring_elements 0.91443
published_at 2026-04-02T12:55:00Z
2
value 0.07028
scoring_system epss
scoring_elements 0.91453
published_at 2026-04-04T12:55:00Z
3
value 0.07028
scoring_system epss
scoring_elements 0.9146
published_at 2026-04-07T12:55:00Z
4
value 0.07028
scoring_system epss
scoring_elements 0.91473
published_at 2026-04-08T12:55:00Z
5
value 0.07028
scoring_system epss
scoring_elements 0.91479
published_at 2026-04-09T12:55:00Z
6
value 0.07028
scoring_system epss
scoring_elements 0.91484
published_at 2026-04-11T12:55:00Z
7
value 0.07028
scoring_system epss
scoring_elements 0.91487
published_at 2026-04-12T12:55:00Z
8
value 0.07028
scoring_system epss
scoring_elements 0.91485
published_at 2026-04-13T12:55:00Z
9
value 0.07028
scoring_system epss
scoring_elements 0.91509
published_at 2026-04-16T12:55:00Z
10
value 0.07028
scoring_system epss
scoring_elements 0.91504
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-4434
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4434
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4434
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=385054
reference_id 385054
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=385054
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.1
Risk_score0.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fgbr-mydh-7bhx