Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/balsa@2.6.4-2?distro=trixie
purl pkg:deb/debian/balsa@2.6.4-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-8azh-711b-xuap Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140. CVE-2003-0167
VCID-ukjn-pbdj-u3e3 Multiple vulnerabilities have been reported in Mozilla Firefox, Thunderbird, SeaMonkey and XULRunner, some of which may allow user-assisted arbitrary remote code execution. CVE-2007-1558
VCID-yxy2-97px-u3ek In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH response to imap_mbox_connect in libbalsa/imap/imap-handle.c. CVE-2020-16118
VCID-yyvn-erek-pqg9 Balsa is vulnerable to a buffer overflow allowing for the user-assisted execution of arbitrary code. CVE-2007-5007

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:20:01.484875+00:00 Debian Importer Fixing VCID-8azh-711b-xuap https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:36:32.102359+00:00 Debian Importer Fixing VCID-yxy2-97px-u3ek https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:08:18.233796+00:00 Debian Importer Fixing VCID-ukjn-pbdj-u3e3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:01:58.672657+00:00 Debian Importer Fixing VCID-yyvn-erek-pqg9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:11:19.999594+00:00 Debian Importer Fixing VCID-8azh-711b-xuap https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:38:14.998820+00:00 Debian Importer Fixing VCID-yxy2-97px-u3ek https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:48:34.065936+00:00 Debian Importer Fixing VCID-ukjn-pbdj-u3e3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:43:44.092128+00:00 Debian Importer Fixing VCID-yyvn-erek-pqg9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:18:07.525630+00:00 Debian Importer Fixing VCID-8azh-711b-xuap https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:15:32.921557+00:00 Debian Importer Fixing VCID-yxy2-97px-u3ek https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:07:05.860464+00:00 Debian Importer Fixing VCID-ukjn-pbdj-u3e3 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:06:47.025183+00:00 Debian Importer Fixing VCID-yyvn-erek-pqg9 https://security-tracker.debian.org/tracker/data/json 38.1.0