CVE-2013-2111

Dovecot < 2.2.2 - Denial of Service via Invalid IMAP APPEND Parameters

Title source: llm
STIX 2.1

Description

The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53492
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1028585
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/05/24/1
Patch, Vendor Advisory mailing-list x_refsource_mlist
http://www.dovecot.org/list/dovecot-news/2013-May/000255.html

Scores

EPSS 0.0243
EPSS Percentile 82.3%

Details

CWE
CWE-20
Status published
Products (3)
dovecot/dovecot 2.2 rc1 (7 CPE variants)
dovecot/dovecot 2.2.0
dovecot/dovecot < 2.2.1
Published May 27, 2014
Tracked Since Feb 18, 2026