Updated dovecot packages fix security vulnerability

2014-05-1704:38:24

Gentoo Foundation

advisories.mageia.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.091 Low

EPSS

Percentile

94.7%

JSON

Updated dovecot packages fix security vulnerability. Dovecot before 2.2.13 is vulnerable to a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn’t finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging around for a long time (CVE-2014-3430).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchdovecot< 2.1.15-2.1dovecot-2.1.15-2.1.mga3
Mageia4noarchdovecot< 2.2.6-2.2dovecot-2.2.6-2.2.mga4