PT-2017-6670

Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.2.17 Description The issue allows remote attackers to cause a denial of service, specifically a crash of the login process, via vectors related to handshake failures when SSLv3 is disabled. Recommendations For...

CVE-2014-3569

The ssl23getclienthello function in s23srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an unexpected handshake, as demonstrated by...