Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qx86-c9pp-83v2

Опубликовано: 28 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause degradation of service for IMAP. Disable IMAP hibernation. Update to non-vulnerable version. No publicly available exploits are known.

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause degradation of service for IMAP. Disable IMAP hibernation. Update to non-vulnerable version. No publicly available exploits are known.

EPSS

Процентиль: 21%
0.0029
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.3
ubuntu
16 дней назад

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause degradation of service for IMAP. Disable IMAP hibernation. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
redhat
16 дней назад

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause degradation of service for IMAP. Disable IMAP hibernation. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
nvd
16 дней назад

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause degradation of service for IMAP. Disable IMAP hibernation. Update to non-vulnerable version. No publicly available exploits are known.

CVSS3: 4.3
debian
16 дней назад

An attacker that has valid credentials can open many connections to th ...

suse-cvrf
11 дней назад

Security update for dovecot22

EPSS

Процентиль: 21%
0.0029
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-125