Wind River Support Network

HomeDefectsLIN8-8876
Acknowledged

LIN8-8876 : Security Advisory - dovecot - CVE-2017-14461

Created: Mar 15, 2018    Updated: May 29, 2018
Found In Version: 8.0.0.25
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.

https://nvd.nist.gov/vuln/detail/CVE-2017-14461

CVEs


Live chat
Online