Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vm4w-qxvr-6wfp

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

EPSS

Процентиль: 99%
0.48197
Средний

5.9 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVSS3: 7.4
redhat
больше 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVSS3: 5.9
nvd
больше 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVSS3: 5.9
debian
больше 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is confi ...

EPSS

Процентиль: 99%
0.48197
Средний

5.9 Medium

CVSS3

Дефекты

CWE-20