← All advisories

Medium severity5.9NVD Advisory· Published Aug 10, 2021· Updated Jun 17, 2026

CVE-2021-38370

CVE-2021-38370

Description

In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Alpine/Alpinedescription
Alpine/Alpinellm-fuzzy
Range: <2.25
Alpine Project/Alpine
cpe:2.3:a:alpine_project:alpine:*:*:*:*:*:*:*:*
Range: <2.25

Patches

Vulnerability mechanics

References

4

nostarttls.secvuln.infonvdExploitThird Party Advisory
alpine.x10host.comnvdRelease NotesThird Party Advisory
bugs.gentoo.org/807613nvdThird Party Advisory
security.gentoo.org/glsa/202301-07nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.