CVE-2017-14461
- State
- Published
- Severity
- 5.9 Medium
- Published
- Mar 2, 2018
- Updated
- Sep 16, 2024
- Reserved
- Sep 13, 2017
Description
A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.9 Medium | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H | talos |
Weaknesses
- CWE-125 Out-of-bounds Read
Affected Products
| Product | Versions |
|---|---|
DovecotThe Dovecot Project |
|
References
- USN-3587-1vendor-advisory
- [debian-lts-announce] 20180331 [SECURITY] [DLA 1333-1] dovecot security updatemailing-list
- DSA-4130vendor-advisory
- USN-3587-2vendor-advisory
- 103201vdb-entry
- [dovecot-news] 20180228 v2.2.34 releasedmailing-list
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0510
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.