USN-4456-2: Dovecot vulnerabilities

USN-4456-1 fixed several vulnerabilities in Dovecot. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly use this issue to cause Dovecot to...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Dovecot vulnerabilities (USN-4456-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4456-1 advisory. It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly use this issue to...

Debian DSA-4745-1 : dovecot - security update

Several vulnerabilities have been discovered in the Dovecot email server. - CVE-2020-12100 Receiving mail with deeply nested MIME parts leads to resource exhaustion as Dovecot attempts to parse it. - CVE-2020-12673 Dovecot's NTLM implementation does not correctly check message buffer size, which...

Ubuntu: Security Advisory (USN-4456-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALPINE-CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

[SECURITY] [DSA 4745-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4745-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...

CVE-2020-12674

CVE-2020-12674 affects Dovecot before 2.3.11.3. The flaw arises in the Remote Passphrase Authentication (RPA) handling, where a zero-length input is mishandled, causing the authentication service to crash. This is listed alongside CVE-2020-12100 and CVE-2020-12673 in multiple advisories. Remediat...

USN-4456-1: Dovecot vulnerabilities

It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly use this issue to cause Dovecot to consume resources, resulting in a denial of service. CVE-2020-12100 It was discovered that Dovecot incorrectly handled memory when using NTLM. A remote...

CVE-2019-12674

CVE-2019-12674 refers to Cisco Firepower Threat Defense (FTD) Software multi-instance container escape vulnerabilities. The root cause is insufficient protections on the underlying filesystem, allowing an authenticated, local attacker to modify critical files and escape their FTD container to exe...

CVE-2018-12674

The CVE-2018-12674 issue affects SV3C L-SERIES HD CAMERA (versions V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B). The root cause is that the device stores the username and password in session cookies; possession of those cookies could allow an attacker to obtain the logged‑in...

openSUSE Security Update : ImageMagick (openSUSE-2018-230)

This update for ImageMagick fixes the following issues : - CVE-2017-9405: A memory leak in the ReadICONImage function was fixed that could lead to DoS via memory exhaustion bsc1042911 - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of...

CVE-2017-12674

CVE-2017-12674 affects ImageMagick (described for version 7.0.6-2) with a CPU exhaustion vulnerability in ReadPDBImage (coders/pdb.c) that can cause a denial of service. Connected advisories indicate this CVE is addressed in vendor-sec updates (e.g., Debian/DLA-2366-1 and related SUSE/OpenVAS ent...

CVE-2017-12674

In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service...

Fedora Core 12 FEDORA-2009-12674 (dstat)

The remote host is missing an update to dstat announced via advisory FEDORA-2009-12674. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...