CVE-2017-15132

Priority
Medium
Description
A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL
authentication results in a memory leak in dovecot's auth client used by
login processes. The leak has impact in high performance configuration
where same login processes are reused and can cause the process to crash
due to memory exhaustion.
References
Bugs
Notes
 leosilva> debian found a regression caused by this commit. In order to fix this
 leosilva> both commit/patch should be applied.
Assigned-to
leosilva
Package
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):released (1:2.0.19-0ubuntu2.4)
Ubuntu 14.04 LTS (Trusty Tahr):released (1:2.2.9-1ubuntu2.3)
Ubuntu 16.04 LTS (Xenial Xerus):released (1:2.2.22-1ubuntu2.6)
Ubuntu 17.10 (Artful Aardvark):released (1:2.2.27-3ubuntu1.2)
Ubuntu 18.04 LTS (Bionic Beaver):released (1:2.2.33.2-1ubuntu3)
More Information

Updated: 2018-02-26 17:14:43 UTC (commit 14274)