CVE:CVE-2021-3657
CNNVD:CNNVD-202202-1591
Sourceforge mbsync是美国Sourceforge社区的一个应用软件。提供同步远程IMAP邮箱和本地maildir样式的邮箱
Sourceforge mbsync 存在缓冲区错误漏洞，该漏洞源于由于对非常大的 IMAP字面量的处理不足，恶意或受攻击的IMAP服务器，甚至假设外部电子邮件发送者，可能会导致几种不同的缓冲区溢出，这可能会被用于远程代码执行。
solution:Upgrade isync_project isync to a higher version than 1.4.4,and avoid the version (,1.4.4); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0