Ubuntu notice covers Twisted IMAP server denial-of-service flaw
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Ubuntu notice USN-9000-1 reports that Twisted's IMAP server mishandles wildcard patterns in mailbox LIST-style commands. An authenticated remote attacker could possibly trigger excessive resource consumption and a denial of service. The notice gives no CVE identifier and no affected or fixed versions. Defenders running Twisted's IMAP server should apply the Ubuntu package update once installed and restrict IMAP access to trusted users.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Apply the Ubuntu security update for Twisted when it is available on your systems.
- Check whether any of your systems run Twisted's IMAP server.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Wed 4 NovemberUSN-9000-1: Twisted vulnerabilityUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products