Summary
It was discovered that Dovecot incorrectly handled closing inactive SSL/TLS
connections. A remote attacker could use this issue to cause Dovecot to
stop responding to new connections, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | dovecot | 1:2.2.9-1ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connecti…
References
-
report
https://ubuntu.com/security/CVE-2014-3430