Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-3420

Опубликовано: 26 апр. 2015
Источник: redhat
CVSS2: 4.3

Описание

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.

Отчет

This issue did not affect the versions of dovecot as shipped with Red Hat Enterprise Linux 5, 6, and 7.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5dovecotNot affected
Red Hat Enterprise Linux 6dovecotNot affected
Red Hat Enterprise Linux 7dovecotNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-391
https://bugzilla.redhat.com/show_bug.cgi?id=1216057dovecot: SSL/TLS handshake failures leading to a crash of the login process.

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 8 лет назад

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.

CVSS3: 5.9
nvd
почти 8 лет назад

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.

CVSS3: 5.9
debian
почти 8 лет назад

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 ...

CVSS3: 5.9
github
больше 3 лет назад

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.

4.3 Medium

CVSS2