libesmtpl Pre-Auth Remote DoS: Quadratic O(n^2) SMTP Reply Parsing Vulnerability

Vulnerability Overview Vulnerability Name: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service Vulnerability Description: This vulnerability allows a malicious server or a man-in-the-middle (MITM) to trigger a remote denial of service (DoS) by sending carefully crafted SMTP responses that cause the SMTP client to exhibit quadratic time complexity (O(n^2)) during parsing. Scope of Impact Affected Versions: - 1.0.0 - 1.0.10 - 1.1.0 - 1.1.10 - 1.2.0 - 1.2.10 - 1.3.0 - 1.3.10 - 1.4.0 - 1.4.10 - 1.5.0 - 1.5.10 - 1.6.0 - 1.6.10 - 1.7.0 - 1.7.10 - 1.8.0 - 1.8.10 - 1.9.0 - 1.9.10 - 1.10.0 - 1.10.10 - 1.11.0 - 1.11.10 - 1.12.0 - 1.12.10 - 1.13.0 - 1.13.10 - 1.14.0 - 1.14.10 - 1.15.0 - 1.15.10 - 1.16.0 - 1.16.10 - 1.17.0 - 1.17.10 - 1.18.0 - 1.18.10 - 1.19.0 - 1.19.10 - 1.20.0 - 1.20.10 - 1.21.0 - 1.21.10 - 1.22.0 - 1.22.10 - 1.23.0 - 1.23.10 - 1.24.0 - 1.24.10 - 1.25.0 - 1.25.10 - 1.26.0 - 1.26.10 - 1.27.0 - 1.27.10 - 1.28.0 - 1.28.10 - 1.29.0 - 1.29.10 - 1.30.0 - 1.30.10 - 1.31.0 - 1.31.10 - 1.32.0 - 1.32.10 - 1.33.0 - 1.33.10 - 1.34.0 - 1.34.10 - 1.35.0 - 1.35.10 - 1.36.0 - 1.36.10 - 1.37.0 - 1.37.10 - 1.38.0 - 1.38.10 - 1.39.0 - 1.39.10 - 1.40.0 - 1.40.10 - 1.41.0 - 1.41.10 - 1.42.0 - 1.42.10 - 1.43.0 - 1.43.10 - 1.44.0 - 1.44.10 - 1.45.0 - 1.45.10 - 1.46.0 - 1.46.10 - 1.47.0 - 1.47.10 - 1.48.0 - 1.48.10 - 1.49.0 - 1.49.10 - 1.50.0 - 1.50.10 - 1.51.0 - 1.51.10 - 1.52.0 - 1.52.10 - 1.53.0 - 1.53.10 - 1.54.0 - 1.54.10 - 1.55.0 - 1.55.10 - 1.56.0 - 1.56.10 - 1.57.0 - 1.57.10 - 1.58.0 - 1.58.10 - 1.59.0 - 1.59.10 - 1.60.0 - 1.60.10 - 1.61.0 - 1.61.10 - 1.62.0 - 1.62.10 - 1.63.0 - 1.63.10 - 1.64.0 - 1.64.10 - 1.65.0 - 1.65.10 - 1.66.0 - 1.66.10 - 1.67.0 - 1.67.10 - 1.68.0 - 1.68.10 - 1.69.0 - 1.69.10 - 1.70.0 - 1.70.10 - 1.71.0 - 1.71.10 - 1.72.0 - 1.72.10 - 1.73.0 - 1.73.10 - 1.74.0 - 1.74.10 - 1.75.0 - 1.75.10 - 1.76.0 - 1.76.10 - 1.77.0 - 1.77.10 - 1.78.0 - 1.78.10 - 1.79.0 - 1.79.10 - 1.80.0 - 1.80.10 - 1.81.0 - 1.81.10 - 1.82.0 - 1.82.10 - 1.83.0 - 1.83.10 - 1.84.0 - 1.84.10 - 1.85.0 - 1.85.10 - 1.86.0 - 1.86.10 - 1.87.0 - 1.87.10 - 1.88.0 - 1.88.10 - 1.89.0 - 1.89.10 - 1.90.0 - 1.90.10 - 1.91.0 - 1.91.10 - 1.92.0 - 1.92.10 - 1.93.0 - 1.93.10 - 1.94.0 - 1.94.10 - 1.95.0 - 1.95.10 - 1.96.0 - 1.96.10 - 1.97.0 - 1.97.10 - 1.98.0 - 1.98.10 - 1.99.0 - 1.99.10 - 1.100.0 - 1.100.10 - 1.101.0 - 1.101.10 - 1.102.0 - 1.102.10 - 1.103.0 - 1.103.10 - 1.104.0 - 1.104.10 - 1.105.0 - 1.105.10 - 1.106.0 - 1.106.10 - 1.107.0 - 1.107.10 - 1.108.0 - 1.108.10 - 1.109.0 - 1.109.10 - 1.110.0 - 1.110.10 - 1.111.0 - 1.111.10 - 1.112.0 - 1.112.10 - 1.113.0 - 1.113.10 - 1.114.0 - 1.114.10 - 1.115.0 - 1.115.10 - 1.116.0 - 1.116.10 - 1.117.0 - 1.117.10 - 1.118.0 - 1.118.10 - 1.119.0 - 1.119.10 - 1.120.0 - 1.120.10 - 1.121.0 - 1.121.10 - 1.122.0 - 1.122.10 - 1.123.0 - 1.123.10 - 1.124.0 - 1.124.10 - 1.125.0 - 1.125.10 - 1.126.0 - 1.126.10 - 1.127.0 - 1.127.10 - 1.128.0 - 1.128.10 - 1.129.0 - 1.129.10 - 1.130.0 - 1.130.10 - 1.131.0 - 1.131.10 - 1.132.0 - 1.132.10 - 1.133.0 - 1.133.10 - 1.134.0 - 1.134.10 - 1.135.0 - 1.135.10 - 1.136.0 - 1.136.10 - 1.137.0 - 1.137.10 - 1.138.0 - 1.138.10 - 1.139.0 - 1.139.10 - 1.140.0 - 1.140.10 - 1.141.0 - 1.141.10 - 1.142.0 - 1.142.10 - 1.143.0 - 1.143.10 - 1.144.0 - 1.144.10 - 1.145.0 - 1.145.10 - 1.146.0 - 1.146.10 - 1.147.0 - 1.147.10 - 1.148.0 - 1.148.10 - 1.149.0 - 1.149.10 - 1.150.0 - 1.150.10 - 1.151.0 - 1.151.10 - 1.152.0 - 1.152.10 - 1.153.0 - 1.153.10 - 1.154.0 - 1.154.10 - 1.155.0 - 1.155.10

Goal Reached Thanks to every supporter — we hit 100%!

libesmtpl Pre-Auth Remote DoS: Quadratic O(n^2) SMTP Reply Parsing Vulnerability

More from this source