Red Hat Security AdvisoryRHSA-2014:0790
dovecot security update
Released 2014-06-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) dovecot-1:2.0.9-7.el6_5.1, dovecot-1:2.0.9-7.el6_5.1.ppc, dovecot-mysql-1:2.0.9-7.el6_5.1 +2
- Red Hat Enterprise Linux Server (v. 7) dovecot-1:2.2.10-4.el7_0.1, dovecot-1:2.2.10-4.el7_0.1.ppc, dovecot-mysql-1:2.2.10-4.el7_0.1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) dovecot-1:2.0.9-7.el6_5.1, dovecot-devel-1:2.0.9-7.el6_5.1
- Red Hat Enterprise Linux Workstation (v. 6) dovecot-1:2.0.9-7.el6_5.1, dovecot-mysql-1:2.0.9-7.el6_5.1, dovecot-pgsql-1:2.0.9-7.el6_5.1 +1
- Red Hat Enterprise Linux Workstation (v. 7) dovecot-1:2.2.10-4.el7_0.1, dovecot-mysql-1:2.2.10-4.el7_0.1, dovecot-pgsql-1:2.2.10-4.el7_0.1 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) dovecot-1:2.0.9-7.el6_5.1, dovecot-devel-1:2.0.9-7.el6_5.1
Fixes 1 record
Priority LOW 29
Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service (resource consumption) via an incompl…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03331 · Published 2014-05-14 · Partial fix CWE-287
