Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:atheme:atheme:7.2.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "7.2.7"
},
{
"last_affected": "7.2.7"
}
],
"source": "CPE_STRING"
},
{
"original_tag": "v7.2.8",
"range": [
{
"fixed": "ebdeaee9432eb6525a43224fb978da81c18fc3cc"
}
],
"source": "REFERENCES_TAG"
}
]
}