OX Dovecot Pro CVE-2024-23184 CWE-770 Resource Exhaustion Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Name: CVE-2024-23184 - Category: CWE-770 (Insufficient Resource Allocation or Unbounded Resource Consumption) - Description: When processing a large number of email headers (such as From, To, Cc, Bcc, etc.), CPU usage becomes extremely high. In production environments, processing 100k header lines takes 12 seconds, while processing 500k header lines takes 18 minutes. This behavior can be exploited by external attackers who send large volumes of emails to victims, making it a security issue. 2. Affected Products: - Product Name: OX Dovecot Pro core - Versions: - 2.3.21 - 2.3.21.1 - 3.0.0 3. Discovery Date: 2024-01-30T22:55:25+01:00 4. Fix Date: - Last affected version: 2.3.21 - First fixed version: 2.3.21.1 - Second fixed version: 3.0.0 5. Threat: - Impact: External attackers can send specially crafted messages to consume target system resources and cause service disruption. - Exploit Status: No publicly available exploit tools. 6. Scoring: - CVSS v3: - Version: 3.1 - Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N - Base Score: 5.0 - Base Severity: MEDIUM - Attack Vector: NETWORK - Attack Complexity: LOW - Privileges Required: LOW - User Interaction: NONE - Scope: CHANGED - Confidentiality Impact: NONE - Integrity Impact: LOW - Availability Impact: NONE This information helps understand the nature of the vulnerability, the affected product versions, discovery and fix timelines, and the severity and potential threats associated with it.

Goal Reached Thanks to every supporter — we hit 100%!

OX Dovecot Pro CVE-2024-23184 CWE-770 Resource Exhaustion Vulnerability