Lucene search
RedHatRHSA-2019:2836HistorySep 20, 2019 - 8:22 a.m.
(RHSA-2019:2836) Important: dovecot security update
2019-09-2008:22:52
access.redhat.com
69
0.614 Medium
EPSS
Percentile
97.8%
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.
Security Fix(es):
- dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes (CVE-2019-11500)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | ppc64le | dovecot-mysql | < 2.2.36-3.el7_7.1 | dovecot-mysql-2.2.36-3.el7_7.1.ppc64le.rpm |
| RedHat | 7 | x86_64 | dovecot-devel | < 2.2.36-3.el7_7.1 | dovecot-devel-2.2.36-3.el7_7.1.x86_64.rpm |
| RedHat | 7 | ppc64 | dovecot-devel | < 2.2.36-3.el7_7.1 | dovecot-devel-2.2.36-3.el7_7.1.ppc64.rpm |
| RedHat | 7 | x86_64 | dovecot-pgsql | < 2.2.36-3.el7_7.1 | dovecot-pgsql-2.2.36-3.el7_7.1.x86_64.rpm |
| RedHat | 7 | s390x | dovecot-pigeonhole | < 2.2.36-3.el7_7.1 | dovecot-pigeonhole-2.2.36-3.el7_7.1.s390x.rpm |
| RedHat | 7 | ppc64 | dovecot-mysql | < 2.2.36-3.el7_7.1 | dovecot-mysql-2.2.36-3.el7_7.1.ppc64.rpm |
| RedHat | 7 | ppc | dovecot | < 2.2.36-3.el7_7.1 | dovecot-2.2.36-3.el7_7.1.ppc.rpm |
| RedHat | 7 | s390x | dovecot-pgsql | < 2.2.36-3.el7_7.1 | dovecot-pgsql-2.2.36-3.el7_7.1.s390x.rpm |
| RedHat | 7 | s390x | dovecot-mysql | < 2.2.36-3.el7_7.1 | dovecot-mysql-2.2.36-3.el7_7.1.s390x.rpm |
| RedHat | 7 | ppc64le | dovecot | < 2.2.36-3.el7_7.1 | dovecot-2.2.36-3.el7_7.1.ppc64le.rpm |
Related
ubuntu
ubuntu
Dovecot vulnerability
2019-08-28 00:00:00
Dovecot regression
2019-08-28 00:00:00
Dovecot vulnerability
2019-08-28 00:00:00
openvas
openvas
Dovecot < 2.2.36.4 and < 2.3.7.2 Heap Overflow Vulnerability
2019-08-30 00:00:00
Debian: Security Advisory (DLA-1901-1)
2019-08-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2454-1)
2021-04-19 00:00:00
oraclelinux
oraclelinux
dovecot security update
2019-09-23 00:00:00
dovecot security update
2019-09-20 00:00:00
dovecot security update
2019-09-23 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2019-2243)
2019-11-08 00:00:00
Debian DSA-4510-1 : dovecot - security update
2019-08-29 00:00:00
Scientific Linux Security Update : dovecot on SL7.x x86_64 (20190920)
2019-09-23 00:00:00
ubuntucve
ubuntucve
CVE-2019-11500
2019-08-28 00:00:00
alpinelinux
alpinelinux
CVE-2019-11500
2019-08-29 14:15:11
osv
osv
CVE-2019-11500
2019-08-29 14:15:11
dovecot - security update
2019-08-29 00:00:00
dovecot - security update
2019-08-28 00:00:00
freebsd
freebsd
Dovecot -- improper input validation
2019-04-13 00:00:00
debian
debian
[SECURITY] [DSA 4510-1] dovecot security update
2019-08-28 12:15:27
[SECURITY] [DSA 4510-1] dovecot security update
2019-08-28 12:15:27
[SECURITY] [DLA 1901-1] dovecot security update
2019-08-29 19:02:49
redhat
redhat
(RHSA-2019:2822) Important: dovecot security update
2019-09-20 01:37:54
(RHSA-2019:2885) Important: dovecot security update
2019-09-23 19:48:53
cve
cve
CVE-2019-11500
2019-08-29 14:15:11
centos
centos
dovecot security update
2019-09-27 12:11:33
dovecot security update
2019-09-26 13:00:35
archlinux
archlinux
[ASA-201908-18] dovecot: arbitrary code execution
2019-08-28 00:00:00
[ASA-201908-19] pigeonhole: arbitrary code execution
2019-08-28 00:00:00
amazon
amazon
Important: dovecot
2019-11-04 22:10:00
checkpoint_advisories
checkpoint_advisories
Dovecot And Pigeonhole Remote Code Execution (CVE-2019-11500)
2020-03-01 00:00:00
debiancve
debiancve
CVE-2019-11500
2019-08-29 14:15:11
veracode
veracode
Remote Code Execution (RCE)
2019-09-21 00:17:27
prion
prion
Remote code execution
2019-08-29 14:15:00
nvd
nvd
CVE-2019-11500
2019-08-29 14:15:11
fedora
fedora
[SECURITY] Fedora 31 Update: dovecot-2.3.7.2-1.fc31
2019-09-14 16:38:16
[SECURITY] Fedora 30 Update: dovecot-2.3.7.2-1.fc30
2019-08-30 14:21:41
[SECURITY] Fedora 29 Update: dovecot-2.3.7.2-1.fc29
2019-09-06 12:59:59
redhatcve
redhatcve
CVE-2019-11500
2019-10-10 05:23:44
mageia
mageia
Updated dovecot packages fix security vulnerability
2019-09-08 17:09:05
altlinux
altlinux
cvelist
cvelist
CVE-2019-11500
2019-08-29 13:51:46
gentoo
gentoo
Dovecot: Multiple vulnerabilities
2019-08-31 00:00:00
suse
suse
Security update for dovecot23 (important)
2019-10-07 00:00:00
Security update for dovecot23 (important)
2019-10-07 00:00:00