It was discovered that Dovecot incorrectly handled closing inactive SSL/TLS connections. A remote attacker could use this issue to cause Dovecot to stop responding to new connections, resulting in a denial of service.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-core" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-dbg" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-dev" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-gssapi" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-imapd" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-ldap" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-lmtpd" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-managesieved" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-mysql" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-pgsql" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-pop3d" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-sieve" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-solr" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "dovecot-sqlite" }, { "binary_version": "1:2.2.9-1ubuntu2.1", "binary_name": "mail-stack-delivery" } ] }