Lucene search

K
freebsdFreeBSD6A6AD6CB-5C6C-11EF-B456-001E676BF734
HistoryAug 14, 2024 - 12:00 a.m.

Dovecot -- DoS

2024-08-1400:00:00
vuxml.freebsd.org
6
dovecot
dos
address headers
email headers
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

9.6%

Dovecot reports:

A DoS is possible with a large number of address headers or abnormally large email headers.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchdovecot< 2.3.21.1UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

9.6%