Catálogo de CVE

CVE-2021-43331

UBUNTU-

[Catálogo de CVE]

It was discovered that Mailman incorrectly handled certain URL. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-43331) It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2021-43332)

Gravidade
High · CVSS 7.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.38% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntupromailman1:2.1.20-1UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.1UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.3UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.4UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.5UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.6UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.6+esm1UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.6+esm2UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.29-1UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.29-1build1UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.29-1ubuntu3UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.29-1ubuntu3.1UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]

Showing 12 observations. All 31 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debian9mailman1:2.1.23-1UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u1UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u2UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u3UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u4UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u5UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u6UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u7UnknownSource applicability is not established[DLA-3049-1]
Debian9mailman1:2.1.23-1+deb9u8UnknownSource applicability is not established[DLA-3049-1]
Ubuntu18.04mailman1:2.1.23-1UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.24-1UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.25-1UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.26-1UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.26-1ubuntu0.1UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.26-1ubuntu0.2UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.26-1ubuntu0.3UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.26-1ubuntu0.4UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntu18.04mailman1:2.1.26-1ubuntu0.5UnknownSource applicability is not established[USN-5151-1][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.20-1UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.1UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.3UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.4UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.5UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.6UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.6+esm1UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.20-1ubuntu0.6+esm2UnknownSource applicability is not established[USN-5151-1]
Ubuntupromailman1:2.1.29-1UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.29-1build1UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.29-1ubuntu3UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.29-1ubuntu3.1UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Ubuntupromailman1:2.1.29-1ubuntu3.1+esm1UnknownSource applicability is not established[USN-5151-2][UBUNTU-CVE-2021-43331]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "mailman",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.1.20-1ubuntu0.6+esm2"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1:2.1.20-1",
        "1:2.1.20-1ubuntu0.1",
        "1:2.1.20-1ubuntu0.3",
        "1:2.1.20-1ubuntu0.4",
        "1:2.1.20-1ubuntu0.5",
        "1:2.1.20-1ubuntu0.6",
        "1:2.1.20-1ubuntu0.6+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5151-1",
      "fixed_version": "1:2.1.20-1ubuntu0.6+esm2",
      "provider_source": "pypi",
      "provider_record_id": "USN-5151-1",
      "provider_updated_at": "2026-06-25T13:30:51.068078182Z",
      "applicability_unknown": true
    },
    {
      "name": "mailman",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.1.26-1ubuntu0.5"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1:2.1.23-1",
        "1:2.1.24-1",
        "1:2.1.25-1",
        "1:2.1.26-1",
        "1:2.1.26-1ubuntu0.1",
        "1:2.1.26-1ubuntu0.2",
        "1:2.1.26-1ubuntu0.3",
        "1:2.1.26-1ubuntu0.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5151-1",
      "fixed_version": "1:2.1.26-1ubuntu0.5",
      "provider_source": "pypi",
      "provider_record_id": "USN-5151-1",
      "provider_updated_at": "2026-06-25T13:30:51.068078182Z",
      "applicability_unknown": true
    },
    {
      "name": "mailman",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.1.23-1+deb9u8"
            }
          ]
        }
      ],
      "release": "9",
      "versions": [
        "1:2.1.23-1",
        "1:2.1.23-1+deb9u1",
        "1:2.1.23-1+deb9u2",
        "1:2.1.23-1+deb9u3",
        "1:2.1.23-1+deb9u4",
        "1:2.1.23-1+deb9u5",
        "1:2.1.23-1+deb9u6",
        "1:2.1.23-1+deb9u7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DLA-3049-1",
      "fixed_version": "1:2.1.23-1+deb9u8",
      "provider_source": "pypi",
      "provider_record_id": "DLA-3049-1",
      "provider_updated_at": "2026-03-09T01:19:54.357273Z",
      "applicability_unknown": true
    },
    {
      "name": "mailman",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.1.29-1ubuntu3.1+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1:2.1.29-1",
        "1:2.1.29-1build1",
        "1:2.1.29-1ubuntu3",
        "1:2.1.29-1ubuntu3.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5151-2",
      "fixed_version": "1:2.1.29-1ubuntu3.1+esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-5151-2",
      "provider_updated_at": "2026-02-10T04:42:23Z",
      "applicability_unknown": true
    },
    {
      "name": "mailman",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.1.29-1ubuntu3.1+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1:2.1.29-1",
        "1:2.1.29-1build1",
        "1:2.1.29-1ubuntu3",
        "1:2.1.29-1ubuntu3.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-43331",
      "fixed_version": "1:2.1.29-1ubuntu3.1+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-43331",
      "provider_updated_at": "2026-02-04T02:16:05.977364Z",
      "applicability_unknown": true
    },
    {
      "name": "mailman",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.1.26-1ubuntu0.5"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1:2.1.23-1",
        "1:2.1.24-1",
        "1:2.1.25-1",
        "1:2.1.26-1",
        "1:2.1.26-1ubuntu0.1",
        "1:2.1.26-1ubuntu0.2",
        "1:2.1.26-1ubuntu0.3",
        "1:2.1.26-1ubuntu0.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-43331",
      "fixed_version": "1:2.1.26-1ubuntu0.5",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-43331",
      "provider_updated_at": "2026-02-04T02:16:05.977364Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

A associação de pacotes está em andamento.

Observado:

Referências

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]