Description
Unspecified vulnerability in t-prot (TOFU Protection) before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | t-prot | 2.8-1 | — |
| Debian 13 | t-prot | 2.8-1 | — |
| Debian 12 | t-prot | 2.8-1 | — |
References
- http://freshmeat.net/projects/t-prot/releases/309781
- 61235 vdb-entry
- 37874 third-party-advisory
- tprot-maxlines-dos(54936) vdb-entry