Поиск уязвимостей
Количество 8
Количество 8
CVE-2017-2669
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang.
CVE-2017-2669
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang.
CVE-2017-2669
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang.
CVE-2017-2669
Dovecot before version 2.2.29 is vulnerable to a denial of service. Wh ...
openSUSE-SU-2017:1807-1
Security update for dovecot22
SUSE-SU-2017:1250-1
Security update for dovecot22
GHSA-qchv-9m57-q82h
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang.
ALT-PU-2017-1530
ALT-PU-2017-1530: package `dovecot` update to version 2.2.29.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-2669 Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang. | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
 | CVE-2017-2669 Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang. | CVSS3: 3.7 | 4% Низкий | больше 9 лет назад |
 | CVE-2017-2669 Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang. | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
| CVE-2017-2669 Dovecot before version 2.2.29 is vulnerable to a denial of service. Wh ... | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
 | openSUSE-SU-2017:1807-1 Security update for dovecot22 | 4% Низкий | больше 9 лет назад | |
| SUSE-SU-2017:1250-1 Security update for dovecot22 | 4% Низкий | больше 9 лет назад | |
| GHSA-qchv-9m57-q82h Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang. | CVSS3: 7.5 | 4% Низкий | больше 4 лет назад |
| ALT-PU-2017-1530 ALT-PU-2017-1530: package `dovecot` update to version 2.2.29.1-alt1 | CVSS3: 7.5 | 4% Низкий | больше 9 лет назад |
Уязвимостей на страницу