CVE-2017-14461mediumCWE-125

CVE-2017-14461: medium-severity vulnerability in The Dovecot Project Dovecot

Published · Updated

Follow this CVE+ Monitor dovecot+ Monitor dovecot

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 17%
A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
Affected products
The Dovecot Project · Dovecot