Debian/dovecot: medium 4.3
An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents
Action: Upgrade dovecot to 1:2.4.1+dfsg1-6+deb13u7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.4.1+dfsg1-6+deb13u7 | - |
Fixed versions
| 1:2.4.1+dfsg1-6+deb13u7 |
Sources
published · modified · JSON