CVE-2017-15132

Name of the Vulnerable Software and Affected Versions: dovecot versions 2.0 through 2.2.33 dovecot version 2.3.0

Description: A flaw in the SASL authentication process can cause a memory leak in dovecot's auth client, which is used by login processes. This issue can have significant impact in high-performance configurations where the same login processes are reused, potentially leading to process crashes due to memory exhaustion. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations: For dovecot versions 2.0 through 2.2.33, consider updating to a version that fixes the memory leak issue. For dovecot version 2.3.0, consider updating to a version that fixes the memory leak issue. As a temporary workaround, consider restricting the reuse of login processes to minimize the risk of memory exhaustion.