Bug 1549483 (CVE-2017-14461)

Summary: CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service
Product: [Other] Security Response Reporter: Adam Mariš <amaris>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: bennie.joubert, dan, janfrode, kbost, mhlavink, security-response-team, yozone
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: dovecot 2.2.34, dovecot 2.3.0.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-10-21 19:55:46 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1550507, 1550508, 1551726, 1551727, 1551728, 1551729, 1561158, 1561159    
Bug Blocks: 1549487    
Attachments:
Description Flags
Upstream patch #1
none
Upstream patch #2
none
Upstream patch #3
none
Upstream patch #4
none
Upstream patch #5
none
Upstream patch #6
none
Upstream patch #7 none

Description Adam Mariš 2018-02-27 08:56:58 UTC 
An information leak vulnerability in rfc822_parse_domain was found in dovecot, affecting versions 2.0 - 2.2.33 and 2.3.0.

A malicious party can send a specially crafted email to a vulnerable system, causing it to crash dovecot. In some systems, the mail can be stored into the mail system, causing crash every time it is being opened. If the mail is stored into the mail system, it can be used to also leak heap memory from IMAP process by requesting bodystructure of the mail.
Comment 1 Adam Mariš 2018-02-27 08:59:02 UTC 
Created attachment 1401224 [details]
Upstream patch #1
Comment 2 Adam Mariš 2018-02-27 09:00:23 UTC 
Created attachment 1401225 [details]
Upstream patch #2
Comment 3 Adam Mariš 2018-02-27 09:00:43 UTC 
Created attachment 1401226 [details]
Upstream patch #3
Comment 4 Adam Mariš 2018-02-27 09:01:05 UTC 
Created attachment 1401227 [details]
Upstream patch #4
Comment 5 Adam Mariš 2018-02-27 09:01:28 UTC 
Created attachment 1401228 [details]
Upstream patch #5
Comment 6 Adam Mariš 2018-02-27 09:01:47 UTC 
Created attachment 1401229 [details]
Upstream patch #6
Comment 7 Adam Mariš 2018-02-27 09:02:07 UTC 
Created attachment 1401230 [details]
Upstream patch #7
Comment 9 Adam Mariš 2018-03-01 10:46:47 UTC 
Reference:

http://www.openwall.com/lists/oss-security/2018/03/01/2
Comment 10 Adam Mariš 2018-03-01 10:47:07 UTC 
Created dovecot tracking bugs for this issue:

Affects: fedora-all [bug 1550508]
Comment 16 Pedro Yóssis Silva Barbosa 2018-03-05 14:33:56 UTC 
Acknowledgments:

Name: the Dovecot project
Upstream: Aleksandar Nikolic (Cisco Talos), flxflndy
Comment 17 Pedro Yóssis Silva Barbosa 2018-03-05 14:34:06 UTC 
External References:

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0510
https://www.dovecot.org/list/dovecot-news/2018-February/000370.html