CVE-2021-38370: Command Injection
First published: Tue Aug 10 2021(Updated: )
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Alpine Project Alpine | <2.25 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Alpine issue?
The vulnerability ID for this Alpine issue is CVE-2021-38370.
What is the severity of CVE-2021-38370?
CVE-2021-38370 has a severity rating of medium (5.9).
What is the impact of CVE-2021-38370?
CVE-2021-38370 allows untagged responses from an IMAP server to be accepted before STARTTLS, which can result in unauthorized access to sensitive information.
What is the affected software for CVE-2021-38370?
The affected software for CVE-2021-38370 is Alpine version up to (exclusive) 2.25.
Is there a fix available for CVE-2021-38370?
Yes, updating Alpine to version 2.25 or later will fix CVE-2021-38370.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/alpine project
- canonical/alpine project alpine