CVE-2021-38370

In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.

Affected products

Alpine, Debian, Linuxmint, Ubuntu

Alpine Project Alpine

< 2.25

Fix

Available

CVSS 3.1

5.9 MEDIUM

EPSS

1.6% (73th percentile)

Weakness

CWE-77

NVD status

Modified

Published

2021-08-10

No exploit for CVE-2021-38370 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.