CVE-2021-46853
Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.
- Обновитесь до 2.25+dfsg1-1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости alpine
За последние 30 дней в alpine опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 4
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
- Обновитесь до 2.25+dfsg1-1
Опубликовано ОбновленоCVE-2020-14929
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.
- Обновитесь до 2.23+dfsg1-1
Опубликовано ОбновленоCVE-2008-5514
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Обновитесь до 2.02-3.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.