Wind River Support Network

HomeDefectsLIN9-6551
Acknowledged

LIN9-6551 : Security Advisory - dovecot - CVE-2017-14461

Created: Mar 15, 2018    Updated: May 29, 2018
Found In Version: 9.0.0.14
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.

https://nvd.nist.gov/vuln/detail/CVE-2017-14461

CVEs


Live chat
Online