CVE-2017-14461

2018-03-0215:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.317 Low

EPSS

Percentile

97.0%

JSON

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.10-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.11-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.12-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.13-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.14-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.15-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.16-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.17-mainnoarchdovecot< 2.3.1-r0UNKNOWN
Alpine3.18-mainnoarchdovecot< 2.3.1-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.10-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.11-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.12-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.13-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.14-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.15-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.16-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.17-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN
Alpine	3.18-main	noarch	dovecot	< 2.3.1-r0	UNKNOWN