Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alpine | Alpine_project | * | 2.25 (excluding) |
| Alpine | Ubuntu | bionic | * |
| Alpine | Ubuntu | esm-apps/bionic | * |
| Alpine | Ubuntu | esm-apps/focal | * |
| Alpine | Ubuntu | esm-apps/xenial | * |
| Alpine | Ubuntu | focal | * |
| Alpine | Ubuntu | trusty | * |
| Alpine | Ubuntu | upstream | * |
| Alpine | Ubuntu | xenial | * |