Vulnerability Spotlight: Dovecot out-of-bounds Read Vulnerability
Summary: Cisco Talos disclosed an out-of-bounds read vulnerability, CVE-2017-14461 (TALOS-2017-0510), in the RFC822 parser of Dovecot IMAP Server 2.2.33.2, discovered by Aleksander Nikolic. An attacker could send a specially crafted email over SMTP that the message transfer agent passes to Dovecot, triggering the flaw and potentially causing disclosure of sensitive information and a denial of service; Dovecot released version 2.2.34 to fix it.
What you should know: The trigger is an ordinary inbound email, so any internet-facing Dovecot 2.2.33.2 server can be reached by an attacker without credentials, and the outcome includes both leaked sensitive information and a denial of service.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2017-14461
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026