CVE-2017-15130 - AskarLabs CVE Database

CVE-2017-15130

Vendor The Dovecot Project

Product dovecot

Weakness CWE-400

Published March 2, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart.

Key dates

02Disclosure timeline

March 2, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-15130 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2019-9513 Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service CVE-2024-12534 Denial of Service (DoS) in open-webui/open-webui CVE-2024-20351 Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability CVE-2026-42154 Prometheus: remote read endpoint allows denial of service via crafted snappy payload CVE-2023-34109 User input results in Unbounded resource consumption in @zxcvbn-ts/core