CVE-2021-46853

Alpine anterior a 2.25 permite a atacantes remotos provocar una Denegación de Servicio (DoS) (caída de la aplicación) cuando se envía LIST o LSUB antes de STARTTLS.

It was discovered that Alpine did not use a secure connection under certain circumstances. A remote attacker could possibly use this issue to leak sensitive information. It was discovered that Alpine could allow untagged responses from an IMAP server before upgrading to a TLS connection. A remote attacker could possibly use this issue to leak sensitive information. It was discovered that Alpine could crash when receiving certain SMTP commands. A remote attacker could possibly use this issue to cause a denial of service.