Maple Labs

CVE search · CVE-2017-14461

CVE-2017-14461

high 7.1

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
talos-cna@cisco.com
Weakness
CWE-125, CWE-200

Severity

VersionScoreVectorSource
CVSS 3.0 medium 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H talos-cna@cisco.comSecondary
CVSS 3.0 high 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H nvd@nist.govPrimary
CVSS 2.0 medium 5.5 AV:N/AC:L/Au:S/C:P/I:N/A:P nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References