PT-2024-7272 · Dovecot+10 · Dovecot+10
Published
2024-08-14
·
Updated
2025-01-30
·
CVE-2024-23185
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Dovecot (affected versions not specified)
Description:
The issue is related to resource exhaustion when parsing messages with very large headers. The message-parser reads reasonably sized chunks of the message, but when it feeds them to the message-header-parser, it starts building up a "full value" buffer out of the smaller chunks. This buffer has no size limit, so large headers can cause large memory usage. It doesn't matter whether it's a single long header line or a single header split into multiple lines. Attackers probably can't cause a denial-of-service (DoS) attack on a victim user this way, but a user could append larger mails, allowing them to DoS themselves. Implementing restrictions on headers on the MTA component preceding Dovecot can help mitigate the issue. No publicly available exploits are known.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider implementing restrictions on headers on the MTA component preceding Dovecot to minimize the risk of exploitation. Restrict access to large headers to prevent potential memory issues for the backend. Avoid using large headers in mails to prevent self-denial-of-service.
DoS
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Dovecot
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu