CVE-2016-6188

Опубликовано: 03 фев. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 6.8

EPSS Низкий

Описание

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files.

Ссылки

http://www.openwall.com/lists/oss-security/2016/07/09/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/96007
Third Party Advisory
VDB Entry
https://github.com/inverse-inc/sogo/commit/32bb1456e23a32c7f45079c3985bf732dd0d276d
Issue Tracking
Patch
https://sogo.nu/bugs/view.php?id=3510
Issue Tracking
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/07/09/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/96007
Third Party Advisory
VDB Entry
https://github.com/inverse-inc/sogo/commit/32bb1456e23a32c7f45079c3985bf732dd0d276d
Issue Tracking
Patch
https://sogo.nu/bugs/view.php?id=3510
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:alinto:sogo:2.3.7:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.02156

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2016-6188

CVSS3: 6.5

ubuntu

почти 10 лет назад

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files.

CVE-2016-6188

CVSS3: 6.5

debian

почти 10 лет назад

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of ...

GHSA-5wc3-v5wf-mg8q

CVSS3: 6.5

github

больше 4 лет назад

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files.

ALT-PU-2016-1171

CVSS3: 6.5

altlinux

больше 10 лет назад

ALT-PU-2016-1171: package `sogo` update to version 3.0.1-alt2

EPSS

Процентиль: 82%

0.02156

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-399