Test Kennung:	1.3.6.1.4.1.25623.1.0.117514
Kategorie:	Denial of Service
Titel:	Dovecot 1.2.0 - 2.3.14 DoS Vulnerability
Zusammenfassung:	Dovecot is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Dovecot is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Sieve interpreter is not protected against abusive scripts that claim excessive resource usage. Especially scripts using massive amounts of regexps. Vulnerability Impact: Attacker can DoS the mail delivery system by using excessive amount of CPU and/or reaching the lmtp/lda process limits. Affected Software/OS: Dovecot version 1.2.0 through 2.3.14. Solution: Update to version 2.3.15 or later. Workaround: Disabling the regex sieve extension avoids the worst problems. lmtp_user_concurrency_limit may also be helpful. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-28200 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TK424DWFO2TKJYXZ2H3XL633TYJL4GQN/ https://dovecot.org/security
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.