CVE catalog

CVE-2006-4434

sendmail affected and fixed versions

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of service that is possible here is to fill up the disk with core dumps if the OS actually generates different core dumps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process would terminate anyway, no mail delivery or receiption is affected."

Severity: High
Published: Aug 29, 2006, 12:04:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 4.55% · Oct 27, 2026

Projects and upstream resources

[sendmail][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debiantrixie	sendmail	`8.18.1-6`	Fixed	[CVE-2006-4434]
Debiansid	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debiansid	sendmail	`8.18.2-2`	Fixed	[CVE-2006-4434]
Debianforky	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debianforky	sendmail	`8.18.2-2`	Fixed	[CVE-2006-4434]
Debianbookworm	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debianbookworm	sendmail	`8.17.1.9-2+deb12u2`	Fixed	[CVE-2006-4434]

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Debianbookworm	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debianbookworm	sendmail	`8.17.1.9-2+deb12u2`	Fixed	[CVE-2006-4434]
Debianforky	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debianforky	sendmail	`8.18.2-2`	Fixed	[CVE-2006-4434]
Debiansid	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debiansid	sendmail	`8.18.2-2`	Fixed	[CVE-2006-4434]
Debiantrixie	sendmail	`8.13.8-1`	FixedDistribution-reported fixed boundary	[CVE-2006-4434]
Debiantrixie	sendmail	`8.18.1-6`	Fixed	[CVE-2006-4434]

Original provider fields

{
  "package_releases": [
    {
      "name": "sendmail",
      "status": "fixed",
      "release": "sid",
      "version": "8.18.2-2"
    },
    {
      "name": "sendmail",
      "status": "fixed",
      "release": "forky",
      "version": "8.18.2-2"
    },
    {
      "name": "sendmail",
      "status": "fixed",
      "release": "trixie",
      "version": "8.18.1-6"
    },
    {
      "name": "sendmail",
      "status": "fixed",
      "release": "bookworm",
      "version": "8.17.1.9-2+deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": 385054,
      "name": "sendmail",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "medium",
      "fixed_version": "8.13.8-1"
    },
    {
      "bug": 385054,
      "name": "sendmail",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "medium",
      "fixed_version": "8.13.8-1"
    },
    {
      "bug": 385054,
      "name": "sendmail",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "medium",
      "fixed_version": "8.13.8-1"
    },
    {
      "bug": 385054,
      "name": "sendmail",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "medium",
      "fixed_version": "8.13.8-1"
    }
  ],
  "distribution_packages": []
}

[Debian bug #385054]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libmilter1.0.1]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[libmilter-dev]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[rmail]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[sendmail]Unknown
Details (4)
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[sendmail-base]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[sendmail-bin]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[sendmail-cf]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[sendmail-doc]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · all · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
[sensible-mda]Unknown
Source package: [sendmail]
Details (4)
- 8.17.1.9-2+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.17.1.9-2+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12
- 8.18.1-6~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · bookworm; dsa · sendmail · debian · 12

[Debian 13 (Trixie)]

[libmilter1.0.1]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6+b1 · amd64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6+b1 · arm64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[libmilter-dev]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6+b1 · amd64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6+b1 · arm64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[rmail]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6+b1 · amd64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6+b1 · arm64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[sendmail]Unknown
Details (2)
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[sendmail-base]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[sendmail-bin]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6+b1 · amd64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6+b1 · arm64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[sendmail-cf]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[sendmail-doc]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6 · all · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
[sensible-mda]Unknown
Source package: [sendmail]
Details (2)
- 8.18.1-6+b1 · amd64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13
- 8.18.1-6+b1 · arm64 · trixie
  Fixed · Fixed: 8.13.8-1
  dsa · sendmail · debian · 13

Observed: Oct 23, 2026, 5:03:11 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]