Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cq8p-2j3r-5hxq

Опубликовано: 28 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

EPSS

Процентиль: 13%
0.00226
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
ubuntu
15 дней назад

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
redhat
15 дней назад

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
nvd
15 дней назад

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
debian
15 дней назад

An attacker that has valid credentials can send an invalid IMAP URLFET ...

suse-cvrf
11 дней назад

Security update for dovecot24

EPSS

Процентиль: 13%
0.00226
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200