Bug 1549483 (CVE-2017-14461)

Summary: CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service
Product: [Other] Security Response Reporter: Adam Mariš <amaris>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: bennie.joubert, dan, janfrode, kbost, mhlavink, pokorra.mailinglists, security-response-team, yozone
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: impact=moderate,public=20180228,reported=20180226,source=distros,cvss3=5.9/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H,cwe=CWE-200,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,rhel-7/dovecot=affected,rhel-8/dovecot=notaffected,fedora-all/dovecot=affected
Fixed In Version: dovecot 2.2.34, dovecot 2.3.0.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On: 1561158, 1561159, 1550507, 1550508, 1551726, 1551727, 1551728, 1551729    
Bug Blocks: 1549487    
Attachments:
Description Flags
Upstream patch #1
none
Upstream patch #2
none
Upstream patch #3
none
Upstream patch #4
none
Upstream patch #5
none
Upstream patch #6
none
Upstream patch #7 none

Description Adam Mariš 2018-02-27 08:56:58 UTC
An information leak vulnerability in rfc822_parse_domain was found in dovecot, affecting versions 2.0 - 2.2.33 and 2.3.0.

A malicious party can send a specially crafted email to a vulnerable system, causing it to crash dovecot. In some systems, the mail can be stored into the mail system, causing crash every time it is being opened. If the mail is stored into the mail system, it can be used to also leak heap memory from IMAP process by requesting bodystructure of the mail.

Comment 1 Adam Mariš 2018-02-27 08:59 UTC
Created attachment 1401224 [details]
Upstream patch #1

Comment 2 Adam Mariš 2018-02-27 09:00 UTC
Created attachment 1401225 [details]
Upstream patch #2

Comment 3 Adam Mariš 2018-02-27 09:00 UTC
Created attachment 1401226 [details]
Upstream patch #3

Comment 4 Adam Mariš 2018-02-27 09:01 UTC
Created attachment 1401227 [details]
Upstream patch #4

Comment 5 Adam Mariš 2018-02-27 09:01 UTC
Created attachment 1401228 [details]
Upstream patch #5

Comment 6 Adam Mariš 2018-02-27 09:01 UTC
Created attachment 1401229 [details]
Upstream patch #6

Comment 7 Adam Mariš 2018-02-27 09:02 UTC
Created attachment 1401230 [details]
Upstream patch #7

Comment 9 Adam Mariš 2018-03-01 10:46:47 UTC
Reference:

http://www.openwall.com/lists/oss-security/2018/03/01/2

Comment 10 Adam Mariš 2018-03-01 10:47:07 UTC
Created dovecot tracking bugs for this issue:

Affects: fedora-all [bug 1550508]

Comment 16 Pedro Yóssis Silva Barbosa 2018-03-05 14:33:56 UTC
Acknowledgments:

Name: the Dovecot project
Upstream: Aleksandar Nikolic (Cisco Talos), flxflndy