Bug 1549483 (CVE-2017-14461) - CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service
Summary: CVE-2017-14461 dovecot: Information Leak Vulnerability in rfc822_parse_domain...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2017-14461
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1550507 1550508 1551726 1551727 1551728 1551729 1561158 1561159
Blocks: 1549487
TreeView+ depends on / blocked
 
Reported: 2018-02-27 08:56 UTC by Adam Mariš
Modified: 2023-09-07 19:04 UTC (History)
7 users (show)

Fixed In Version: dovecot 2.2.34, dovecot 2.3.0.1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-10-21 19:55:46 UTC
Embargoed:

Attachments (Terms of Use)
Upstream patch #1 (1.32 KB, patch)
2018-02-27 08:59 UTC, Adam Mariš 		no flags Details | Diff
Upstream patch #2 (13.68 KB, patch)
2018-02-27 09:00 UTC, Adam Mariš 		no flags Details | Diff
Upstream patch #3 (2.15 KB, patch)
2018-02-27 09:00 UTC, Adam Mariš 		no flags Details | Diff
Upstream patch #4 (10.76 KB, patch)
2018-02-27 09:01 UTC, Adam Mariš 		no flags Details | Diff
Upstream patch #5 (1.20 KB, patch)
2018-02-27 09:01 UTC, Adam Mariš 		no flags Details | Diff
Upstream patch #6 (2.73 KB, patch)
2018-02-27 09:01 UTC, Adam Mariš 		no flags Details | Diff
Upstream patch #7 (8.55 KB, patch)
2018-02-27 09:02 UTC, Adam Mariš 		no flags Details | Diff
View All

Description Adam Mariš 2018-02-27 08:56:58 UTC 
An information leak vulnerability in rfc822_parse_domain was found in dovecot, affecting versions 2.0 - 2.2.33 and 2.3.0.

A malicious party can send a specially crafted email to a vulnerable system, causing it to crash dovecot. In some systems, the mail can be stored into the mail system, causing crash every time it is being opened. If the mail is stored into the mail system, it can be used to also leak heap memory from IMAP process by requesting bodystructure of the mail.
Comment 1 Adam Mariš 2018-02-27 08:59:02 UTC 
Created attachment 1401224 [details]
Upstream patch #1
Comment 2 Adam Mariš 2018-02-27 09:00:23 UTC 
Created attachment 1401225 [details]
Upstream patch #2
Comment 3 Adam Mariš 2018-02-27 09:00:43 UTC 
Created attachment 1401226 [details]
Upstream patch #3
Comment 4 Adam Mariš 2018-02-27 09:01:05 UTC 
Created attachment 1401227 [details]
Upstream patch #4
Comment 5 Adam Mariš 2018-02-27 09:01:28 UTC 
Created attachment 1401228 [details]
Upstream patch #5
Comment 6 Adam Mariš 2018-02-27 09:01:47 UTC 
Created attachment 1401229 [details]
Upstream patch #6
Comment 7 Adam Mariš 2018-02-27 09:02:07 UTC 
Created attachment 1401230 [details]
Upstream patch #7
Comment 9 Adam Mariš 2018-03-01 10:46:47 UTC 
Reference:

http://www.openwall.com/lists/oss-security/2018/03/01/2
Comment 10 Adam Mariš 2018-03-01 10:47:07 UTC 
Created dovecot tracking bugs for this issue:

Affects: fedora-all [bug 1550508]
Comment 16 Pedro Yóssis Silva Barbosa 2018-03-05 14:33:56 UTC 
Acknowledgments:

Name: the Dovecot project
Upstream: Aleksandar Nikolic (Cisco Talos), flxflndy
Comment 17 Pedro Yóssis Silva Barbosa 2018-03-05 14:34:06 UTC 
External References:

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0510
https://www.dovecot.org/list/dovecot-news/2018-February/000370.html
Note You need to log in before you can comment on or make changes to this bug.