CVE-2021-46853: Alpine Project Alpine

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.

Affected products

• Alpine Project Alpine: before 2.25 (fixed in 2.25)

Published 2022-11-03. Last modified 2026-06-17.