Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Medium 5.9
  CVE-2017-14461 EPSS 17%

  A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulti…

  The Dovecot Project Dovecot dovecot dovecot Debian Ubuntu Alpine
  Mar 2, 2018
• Unscored —
  CVE-2017-15130

  A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could…

  The Dovecot Project Dovecot dovecot dovecot Debian Ubuntu Alpine
  Mar 2, 2018

Revision history

1. 2025-02-02 #8

   Neue Updates von openSUSE aufgenommen

2. 2018-10-18 #7

   New remediations available

3. 2018-09-06 #6

   New remediations available

4. 2018-05-02 #4

   Version nicht vorhanden

5. 2018-05-02 #5

   Version nicht vorhanden

6. 2018-04-17 #3

   Added references

7. 2018-03-05 #1

   Initial Release

8. 2018-03-05 #2

   Version nicht vorhanden

References

• Dovecot Release Notes vom 2018-03-05
  https://www.dovecot.org/list/dovecot-news/2018-February/000370.html
• SUSE Security Update SUSE-SU-2018:1125-1 vom 2018-05-03
  https://www.suse.com/support/update/announcement/2018/suse-su-20181125-1.html
• SUSE Security Update SUSE-SU-2018:2632-1 vom 2018-09-06
  https://www.suse.com/support/update/announcement/2018/suse-su-20182632-1.html
• SUSE Security Update SUSE-SU-2018:2632-2 vom 2018-10-18
  https://www.suse.com/support/update/announcement/2018/suse-su-20182632-2.html
• openSUSE Security Update OPENSUSE-SU-2025:14715-1 vom 2025-01-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KZSDCZ5LA6IHY7KXVSL6ULAJVP6OFT2M/