Lucene search
Gentoo FoundationGLSA-201412-03HistoryDec 08, 2014 - 12:00 a.m.
Dovecot: Denial of service
2014-12-0800:00:00
Gentoo Foundation
security.gentoo.org
16
0.091 Low
EPSS
Percentile
94.6%
Background
Dovecot is an open source IMAP and POP3 email server.
Description
Dovecot does not properly close connections, allowing a resource exhaustion for incomplete SSL/TLS handshakes.
Impact
A remote attacker could possibly cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All Dovecot users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-mail/dovecot-2.2.13"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-mail/dovecot | < 2.2.13 | UNKNOWN |
Related
nessus
nessus
Debian DSA-2954-1 : dovecot - security update
2014-06-10 00:00:00
GLSA-201412-03 : Dovecot: Denial of Service
2014-12-09 00:00:00
osv
osv
dovecot - security update
2014-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2014-3430
2014-05-13 00:00:00
cve
cve
CVE-2014-3430
2014-05-14 19:55:00
openvas
openvas
RedHat Update for dovecot RHSA-2014:0790-01
2014-07-01 00:00:00
Debian: Security Advisory (DSA-2954-1)
2014-06-08 00:00:00
Gentoo Security Advisory GLSA 201412-03
2015-09-29 00:00:00
mageia
mageia
Updated dovecot packages fix security vulnerability
2014-05-17 04:38:24
fedora
fedora
[SECURITY] Fedora 19 Update: dovecot-2.2.13-1.fc19
2014-06-17 23:38:27
[SECURITY] Fedora 20 Update: dovecot-2.2.13-1.fc20
2014-05-18 22:56:49
[SECURITY] Fedora 20 Update: dovecot-2.2.16-2.fc20
2015-05-19 16:26:41
debian
debian
dovecot security update
2014-06-11 16:56:06
dovecot security update
2014-06-11 16:55:51
[SECURITY] [DSA 2954-1] dovecot security update
2014-06-09 18:02:51
amazon
amazon
Medium: dovecot
2014-07-23 14:09:00
redhat
redhat
(RHSA-2014:0790) Moderate: dovecot security update
2014-06-25 00:00:00
cvelist
cvelist
CVE-2014-3430
2014-05-14 19:00:00
prion
prion
Design/Logic Flaw
2014-05-14 19:55:00
oraclelinux
oraclelinux
dovecot security update
2014-06-25 00:00:00
debiancve
debiancve
CVE-2014-3430
2014-05-14 19:55:00
centos
centos
dovecot security update
2014-06-25 19:00:49
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:54:35
ubuntu
ubuntu
Dovecot vulnerability
2014-05-15 00:00:00
securityvulns
securityvulns