CVE-2017-14461

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.
Configurations

Configuration 1 (hide)

cpe:2.3:a:dovecot:dovecot:2.2.33.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:ubuntu:ubuntu:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:ubuntu:ubuntu:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:ubuntu:ubuntu:17.10:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-03-02 15:29

Updated : 2024-02-28 16:25


NVD link : CVE-2017-14461

Mitre link : CVE-2017-14461

CVE.ORG link : CVE-2017-14461


JSON object : View

Products Affected

debian

  • debian_linux

dovecot

  • dovecot

ubuntu

  • ubuntu
CWE
CWE-125

Out-of-bounds Read

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor