Bug 1549483 (CVE-2017-14461) - CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service
Summary: CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain...
Status: NEW
Alias: CVE-2017-14461
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard: impact=moderate,public=20180228,repor...
Keywords: Security
Depends On: 1561158 1561159 1550507 1550508 1551726 1551727 1551728 1551729
Blocks: 1549487
TreeView+ depends on / blocked
 
Reported: 2018-02-27 08:56 UTC by Adam Mariš
Modified: 2019-05-16 08:11 UTC (History)
8 users (show)

(edit)
Clone Of:
(edit)
Last Closed:


Attachments (Terms of Use)
Upstream patch #1 (1.32 KB, patch)
2018-02-27 08:59 UTC, Adam Mariš
no flags Details | Diff
Upstream patch #2 (13.68 KB, patch)
2018-02-27 09:00 UTC, Adam Mariš
no flags Details | Diff
Upstream patch #3 (2.15 KB, patch)
2018-02-27 09:00 UTC, Adam Mariš
no flags Details | Diff
Upstream patch #4 (10.76 KB, patch)
2018-02-27 09:01 UTC, Adam Mariš
no flags Details | Diff
Upstream patch #5 (1.20 KB, patch)
2018-02-27 09:01 UTC, Adam Mariš
no flags Details | Diff
Upstream patch #6 (2.73 KB, patch)
2018-02-27 09:01 UTC, Adam Mariš
no flags Details | Diff
Upstream patch #7 (8.55 KB, patch)
2018-02-27 09:02 UTC, Adam Mariš
no flags Details | Diff

Description Adam Mariš 2018-02-27 08:56:58 UTC
An information leak vulnerability in rfc822_parse_domain was found in dovecot, affecting versions 2.0 - 2.2.33 and 2.3.0.

A malicious party can send a specially crafted email to a vulnerable system, causing it to crash dovecot. In some systems, the mail can be stored into the mail system, causing crash every time it is being opened. If the mail is stored into the mail system, it can be used to also leak heap memory from IMAP process by requesting bodystructure of the mail.

Comment 1 Adam Mariš 2018-02-27 08:59 UTC
Created attachment 1401224 [details]
Upstream patch #1

Comment 2 Adam Mariš 2018-02-27 09:00 UTC
Created attachment 1401225 [details]
Upstream patch #2

Comment 3 Adam Mariš 2018-02-27 09:00 UTC
Created attachment 1401226 [details]
Upstream patch #3

Comment 4 Adam Mariš 2018-02-27 09:01 UTC
Created attachment 1401227 [details]
Upstream patch #4

Comment 5 Adam Mariš 2018-02-27 09:01 UTC
Created attachment 1401228 [details]
Upstream patch #5

Comment 6 Adam Mariš 2018-02-27 09:01 UTC
Created attachment 1401229 [details]
Upstream patch #6

Comment 7 Adam Mariš 2018-02-27 09:02 UTC
Created attachment 1401230 [details]
Upstream patch #7

Comment 9 Adam Mariš 2018-03-01 10:46:47 UTC
Reference:

http://www.openwall.com/lists/oss-security/2018/03/01/2

Comment 10 Adam Mariš 2018-03-01 10:47:07 UTC
Created dovecot tracking bugs for this issue:

Affects: fedora-all [bug 1550508]

Comment 16 Pedro Yóssis Silva Barbosa 2018-03-05 14:33:56 UTC
Acknowledgments:

Name: the Dovecot project
Upstream: Aleksandar Nikolic (Cisco Talos), flxflndy


Note You need to log in before you can comment on or make changes to this bug.