https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Bug ID: 1835353 Summary: rubygem-mail: Out of memory issue through nested MIME parts Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: psampaio@redhat.com CC: akarol@redhat.com, alexl@redhat.com, bbuckingham@redhat.com, bcourt@redhat.com, bkearney@redhat.com, btotty@redhat.com, caillon+fedoraproject@gmail.com, caolanm@redhat.com, dmetzger@redhat.com, gmccullo@redhat.com, gnome-sig@lists.fedoraproject.org, gtanzill@redhat.com, hhudgeon@redhat.com, jfrey@redhat.com, jhardy@redhat.com, john.j5live@gmail.com, jose.p.oliveira.oss@gmail.com, lzap@redhat.com, mclasen@redhat.com, mmccune@redhat.com, nmoumoul@redhat.com, obarenbo@redhat.com, paul@city-fan.org, perl-devel@lists.fedoraproject.org, rchan@redhat.com, rhughes@redhat.com, rjerrido@redhat.com, rob.myers@gtri.gatech.edu, roliveri@redhat.com, rstrode@redhat.com, sandmann@redhat.com, simaishi@redhat.com, smallamp@redhat.com, sokeeffe@redhat.com, tbrisker@redhat.com, tcallawa@redhat.com, vondruch@redhat.com, walter.pete@yandex.com, xavier@bachelot.org Target Milestone: --- Classification: Other
A possible DoS issue may affect several MIME parsers. Messages with too many tiny nested MIME parts can lead to memory exhaustion on split().
References:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960064 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960062 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960159 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960158
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Pedro Sampaio psampaio@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1835356
--- Comment #1 from Paul Howarth paul@city-fan.org --- Upstream for perl-Email-MIME has a couple of trial releases out with mitigations for this; probably best to wait until a non-trial release that they're happy with is done.
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
--- Comment #2 from Fedora Update System updates@fedoraproject.org --- FEDORA-2020-22764f623f has been pushed to the Fedora 32 stable repository. If problem still persists, please make note of it in this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
--- Comment #3 from Fedora Update System updates@fedoraproject.org --- FEDORA-2020-39d40d9ae9 has been pushed to the Fedora 31 stable repository. If problem still persists, please make note of it in this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Yadnyawalk Tale ytale@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |ytale@redhat.com Flags| |needinfo?(paul@city-fan.org | |)
--- Comment #4 from Yadnyawalk Tale ytale@redhat.com --- I tried to contact ruby-mail upstream but did not got any reply after initial response, I'm still not sure if upstream is considering it CVE worthy.
@Paul, do you know if we have updates specifically for ruby-mail package (https://github.com/mikel/mail) by any chance? (and not perl-Email-MIME, libemail-mime-perl, libgmime or libemail-mime-contenttype-perl)
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Paul Howarth paul@city-fan.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(paul@city-fan.org | |) |
--- Comment #5 from Paul Howarth paul@city-fan.org --- @Yadnyawalk, I've no idea about ruby-mail I'm afraid; my interest in this was regarding the perl modules, which I co-maintain.
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
--- Comment #6 from Yadnyawalk Tale ytale@redhat.com --- Acknowledged. Understood. Thanks.
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
--- Comment #7 from Fedora Update System updates@fedoraproject.org --- perl-Email-MIME-1.949-1.el8, perl-Email-MIME-ContentType-1.024-1.el8 has been pushed to the Fedora EPEL 8 stable repository. If problems still persist, please make note of it in this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Yadnyawalk Tale ytale@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG Last Closed| |2020-06-18 07:22:32
--- Comment #8 from Yadnyawalk Tale ytale@redhat.com --- Closing this NOTABUG since did not found sufficient data to make any a flaw decision.
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Vít Ondruch vondruch@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1835361
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1835361 [Bug 1835361] rubygem-mail: Out of memory issue through nested MIME parts [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Ondrej Soukup osoukup@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1835361 CC| |osoukup@redhat.com Blocks|1835361 |
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1835361 [Bug 1835361] rubygem-mail: Out of memory issue through nested MIME parts [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1835353 Bug 1835353 depends on bug 1835360, which changed state.
Bug 1835360 Summary: perl-Email-MIME: rubygem-mail: Out of memory issue through nested MIME parts [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1835360
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |CURRENTRELEASE
https://bugzilla.redhat.com/show_bug.cgi?id=1835353 Bug 1835353 depends on bug 1835358, which changed state.
Bug 1835358 Summary: gmime: rubygem-mail: Out of memory issue through nested MIME parts [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1835358
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL
https://bugzilla.redhat.com/show_bug.cgi?id=1835353 Bug 1835353 depends on bug 1835362, which changed state.
Bug 1835362 Summary: rubygem-mail: Out of memory issue through nested MIME parts [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1835362
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL
https://bugzilla.redhat.com/show_bug.cgi?id=1835353 Bug 1835353 depends on bug 1835355, which changed state.
Bug 1835355 Summary: perl-Email-MIME-ContentType: rubygem-mail: Out of memory issue through nested MIME parts [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1835355
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |EOL
perl-devel@lists.fedoraproject.org
-
bugzilla＠redhat.com