Alpine/dovecot: medium 5.9
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential wil
Action: Upgrade dovecot to 2.4.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | - | - |
Fixed versions
| 2.4.3-r0 |
Sources
published · modified · JSON