CVE-2017-15130CWE-400

A denial of service flaw was found in dovecot before 2.2.34

published March 2, 2018

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02553 · 84.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-03-02T15:00Z
EPSS history
Timeline
  • 02 MAR 15:00Z
    A denial of service flaw was found in dovecot before 2.2.34
    cvelistv5