Kasper Dupont

توجد مشكلة في `django.core.mail.backends.smtp.EmailBackend` حيث يفشل النظام في منع إعادة استخدام اتصال تم تهيئته جزئيًا بعد فشل مصافحة `STARTTLS` عندما يتم تعيين المتغير `fail silently` على `True`. وهذا يسمح للمهاجمين على مسار الشبكة باعتراض وقراءة محتوى البريد الإلكتروني بنص عادي.

The issue allows an attacker to fill up the neighbour table with enough entries that it will overflow for valid connections after that. This behaviour is more prevalent after commit 58956317c8de ("neighbor: Improve garbage collection") is applied, as it prevents removal from entries that are not NUD FAILED, unless they are more than 5s old. IFF POINTOPOINT interfaces use NUD NOARP entries for IPv6.

The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because, after an initial connection is made, it does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate.

The issue allows remote attackers to cause a denial of service, leading to disruption of protected information availability. This can be exploited remotely.