Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vm4w-qxvr-6wfp

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

EPSS

Процентиль: 95%
0.16367
Средний

5.9 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVSS3: 7.4
redhat
около 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVSS3: 5.9
nvd
почти 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVSS3: 5.9
debian
почти 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is confi ...

EPSS

Процентиль: 95%
0.16367
Средний

5.9 Medium

CVSS3

Дефекты

CWE-20