CVE-2021-38370

MEDIUM CVSS: 5.9 Published: 2021-08-10 Modified: 2026-06-17

Description

In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.

Affected Platforms

Alpine Project Alpine

Weakness Type

CWE-77

References