CVE-2016-8652

Опубликовано: 29 нояб. 2016

Источник: redhat

CVSS3: 7.4

CVSS2: 4.3

EPSS Средний

Описание

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	dovecot	Not affected
Red Hat Enterprise Linux 6	dovecot	Not affected
Red Hat Enterprise Linux 7	dovecot	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1401024dovecot: Remote crash when auth-policy component is activated

EPSS

Процентиль: 95%

0.16367

Средний

7.4 High

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2016-8652

CVSS3: 5.9

ubuntu

почти 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVE-2016-8652

CVSS3: 5.9

nvd

почти 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

CVE-2016-8652

CVSS3: 5.9

debian

почти 9 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is confi ...

GHSA-vm4w-qxvr-6wfp

CVSS3: 5.9

github

больше 3 лет назад

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.

EPSS

Процентиль: 95%

0.16367

Средний

7.4 High

CVSS3

4.3 Medium

CVSS2