What’s Vulnerable › Vulnerabilities

CVE-2016-6188

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-03 · updated 2026-06-17
• Weakness: CWE-399

Description

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files.

Affected products

• Alinto SOGo: 2.3.7

References

• http://www.openwall.com/lists/oss-security/2016/07/09/3
• http://www.securityfocus.com/bid/96007
• https://github.com/inverse-inc/sogo/commit/32bb1456e23a32c7f45079c3985bf732dd0d276d
• https://sogo.nu/bugs/view.php?id=3510
• http://www.openwall.com/lists/oss-security/2016/07/09/3
• http://www.securityfocus.com/bid/96007
• https://github.com/inverse-inc/sogo/commit/32bb1456e23a32c7f45079c3985bf732dd0d276d
• https://sogo.nu/bugs/view.php?id=3510

Get alerted when CVE-2016-6188 or the next vulnerability affects your stack