CVE-2021-38370
CVE-2021-38370
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
CVSS 5.9 · Medium · EPSS 1.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
alpine Debian:12
- Affected ranges
- ECOSYSTEM: < 2.25+dfsg1-1
Update to 2.25+dfsg1-1
alpine Debian:13
- Affected ranges
- ECOSYSTEM: < 2.25+dfsg1-1
Update to 2.25+dfsg1-1
alpine Debian:14
- Affected ranges
- ECOSYSTEM: < 2.25+dfsg1-1
Update to 2.25+dfsg1-1
alpine Ubuntu:Pro:16.04:LTS
- Versions
- 2.20+dfsg1-1
- 2.20+dfsg1-2
- Affected ranges
- ECOSYSTEM: < 2.20+dfsg1-2ubuntu0.1~esm1
Update to 2.20+dfsg1-2ubuntu0.1~esm1
alpine Ubuntu:Pro:18.04:LTS
- Versions
- 2.20+dfsg1-7
- 2.21+dfsg1-1
- 2.21+dfsg1-1build1
- Affected ranges
- ECOSYSTEM: < 2.21+dfsg1-1ubuntu0.1~esm1
Update to 2.21+dfsg1-1ubuntu0.1~esm1
alpine Ubuntu:Pro:20.04:LTS
- Versions
- 2.21+dfsg1-1.1build1
- 2.22+dfsg1-1
- Affected ranges
- ECOSYSTEM: < 2.22+dfsg1-1ubuntu0.1~esm1
Update to 2.22+dfsg1-1ubuntu0.1~esm1