CVE-2014-3430
N/A
Published: May 14, 2014 at 07:00 PM UTC
Updated: June 17, 2026 at 12:08 AM UTC
1 product affected across 1 vendorDovecot
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service (resource consumption) via an incomplete SSL/TLS handshake for an IMAP/POP3 connection.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
1.11.1 rc21.1.01.1.11.1.21.1.31.1.41.1.51.1.61.2.01.2.11.2.101.2.111.2.121.2.131.2.141.2.151.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.0 beta12.0.02.0.12.0.102.0.112.0.122.0.132.0.142.0.152.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.1 rc12.1 rc22.1 rc32.1 rc52.1 rc62.1 rc72.1.02.1.12.1.102.1.112.1.122.1.132.1.142.1.152.1.22.1.32.1.42.1.52.1.62.1.72.1.82.2 rc12.2 rc22.2 rc32.2 rc42.2 rc52.2 rc62.2 rc72.2.02.2.12.2.102.2.13 rc12.2.22.2.32.2.42.2.52.2.62.2.72.2.82.2.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (14)
Mailing Listx_refsource_MLISTPatchVendor Advisory
Source: [email protected]
http://dovecot.org/pipermail/dovecot-news/2014-May/000273.htmlMailing Listx_refsource_MLISTPatch
Source: [email protected]
http://permalink.gmane.org/gmane.mail.imap.dovecot/77499Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2014-0790.htmlQuick Info
StatusMODIFIED
CWE
CWE-287
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card