CVE-2014-3430

Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service (resource consumption) via an incomplete SSL/TLS handshake for an IMAP/POP3 connection.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1:rc2:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.10:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.12:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0:beta1:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.10:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.11:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.12:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.13:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.14:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.0.15:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1:rc1:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1:rc2:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1:rc3:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1:rc5:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1:rc6:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1:rc7:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.7:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.8:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.10:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.11:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.12:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.13:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.14:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.1.15:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2:rc1:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2:rc2:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2:rc3:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2:rc4:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2:rc5:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2:rc6:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2:rc7:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.6:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.7:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.8:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.9:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.10:*:*:*:*:*:*:*
cpe:2.3:a:dovecot:dovecot:2.2.13:rc1:*:*:*:*:*:*

History

21 Nov 2024, 02:08

Type Values Removed Values Added
References () http://advisories.mageia.org/MGASA-2014-0223.html - () http://advisories.mageia.org/MGASA-2014-0223.html -
References () http://dovecot.org/pipermail/dovecot-news/2014-May/000273.html - Patch, Vendor Advisory () http://dovecot.org/pipermail/dovecot-news/2014-May/000273.html - Patch, Vendor Advisory
References () http://linux.oracle.com/errata/ELSA-2014-0790.html - () http://linux.oracle.com/errata/ELSA-2014-0790.html -
References () http://permalink.gmane.org/gmane.mail.imap.dovecot/77499 - Patch () http://permalink.gmane.org/gmane.mail.imap.dovecot/77499 - Patch
References () http://rhn.redhat.com/errata/RHSA-2014-0790.html - () http://rhn.redhat.com/errata/RHSA-2014-0790.html -
References () http://secunia.com/advisories/59051 - () http://secunia.com/advisories/59051 -
References () http://secunia.com/advisories/59537 - () http://secunia.com/advisories/59537 -
References () http://secunia.com/advisories/59552 - () http://secunia.com/advisories/59552 -
References () http://www.debian.org/security/2014/dsa-2954 - () http://www.debian.org/security/2014/dsa-2954 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2015:113 - () http://www.mandriva.com/security/advisories?name=MDVSA-2015:113 -
References () http://www.openwall.com/lists/oss-security/2014/05/09/4 - Patch () http://www.openwall.com/lists/oss-security/2014/05/09/4 - Patch
References () http://www.openwall.com/lists/oss-security/2014/05/09/8 - () http://www.openwall.com/lists/oss-security/2014/05/09/8 -
References () http://www.securityfocus.com/bid/67306 - () http://www.securityfocus.com/bid/67306 -
References () http://www.ubuntu.com/usn/USN-2213-1 - () http://www.ubuntu.com/usn/USN-2213-1 -

Information

Published : 2014-05-14 19:55

Updated : 2024-11-21 02:08


NVD link : CVE-2014-3430

Mitre link : CVE-2014-3430

CVE.ORG link : CVE-2014-3430


JSON object : View

Products Affected

dovecot

  • dovecot
CWE
CWE-287

Improper Authentication