Astra Linux – vulnerability in dovecot

Sending a “NOOP ...” command with 4000 opening and closing parentheses results in approximately 1 MB of additional memory usage. Longer commands will cause the client to disconnect. This 1 MB can be retained for extended periods by not ending the command with an LF character. Thus, an attacker...

CVE-2026-27857

Sending "NOOP ..." command with 4000 parenthesis open+close results in 1MB extra memory usage. Longer commands will result in client disconnection. This 1 MB can be left allocated for longer time periods by not sending the command ending LF. So attacker could connect possibly from even a single I...

CVE-2026-27857: Uncontrolled Resource Consumption

Sending "NOOP ..." command with 4000 parenthesis open+close results in 1MB extra memory usage. Longer commands will result in client disconnection. This 1 MB can be left allocated for longer time periods by not sending the command ending LF. So attacker could connect possibly from even a single I...

PT-2024-30364

Name of the Vulnerable Software and Affected Versions Advanced Contact form 7 DB plugin for WordPress versions up to, and including, 2.0.2 Description The issue allows unauthorized access to data due to a missing capability check on the vsz cf7 export to excel function. This makes it possible for...

CVE-2020-22653

Multiple Ruckus Networks products, including R310, R500, R600, T300, T301n, T301s, SmartCell Gateway 200 (SCG200), SmartZone 100 (SZ-100), SmartZone 300 (SZ300), Virtual SmartZone (vSZ), and ZoneDirector models (1100, 1200, 3000, 5000) , are vulnerable to a flaw involving errors in verifying cryp...

CVE-2020-22657

CVE-2020-22657 affects multiple Ruckus devices (R310/R500/R600 T300/T301n/T301s; SCG200; SZ-100/SZ-300/vSZ; ZoneDirector 1100/1200/3000/5000) with a WEB GUI login authentication bypass. Reported versions include Ruckus devices on 10.5.1.0.199 and SCG200/SZ/vSZ lines prior to 3.6.2.0.795; ZoneDire...