Lucene search
+L

2530 matches found

OpenVAS
OpenVAS
added 2019/12/30 12:00 a.m.37 views

Dovecot 2.0.x < 2.0.16 Man In The Middle Vulnerability

Dovecot is prone to a man-in-the-middle vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

5.8CVSS6.2AI score0.01321EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/12/19 12:00 a.m.41 views

EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2019-2571)

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI...

7.1CVSS6.5AI score0.16677EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/12/18 12:00 a.m.31 views

Dovecot 'CVE-2014-3430' DoS Vulnerability

Dovecot is prone to a Denial of Service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

5CVSS5.6AI score0.03331EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/12/18 12:00 a.m.46 views

Dovecot < 2.2.7 Authentication Bypass Vulnerability

Dovecot is prone to an authentication bypass vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5.8CVSS7.8AI score0.01457EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/12/18 12:00 a.m.27 views

Dovecot < 2.2.2 DoS Vulnerability

Dovecot is prone to a Denial of Service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

5CVSS6.6AI score0.02427EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/12/16 12:00 a.m.24 views

Dovecot < 2.2.27.1rc1 DoS Vulnerability

Dovecot is prone to a Denial of Service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

5.9CVSS5.6AI score0.48197EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/12/16 12:00 a.m.40 views

Dovecot < 2.3.9.2 DoS Vulnerability

Dovecot is prone to a denial of service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

5.3CVSS5.5AI score0.02476EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/16 12:00 a.m.18 views

Dovecot Null Pointer Dereference Vulnerability

Dovecot is an open source IMAP and POP3 mail server for Linux/Unix. A null pointer dereference vulnerability exists in Dovecot versions prior to 2.3.9.2, which can be exploited by an attacker via a specially crafted email to cause the push notification driver to crash if the push notification...

5.3CVSS8.6AI score0.02476EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/12/16 12:00 a.m.45 views

FreeBSD : dovecot -- NULL pointer deref in notify with empty headers (b7dc4dde-2e48-43f9-967a-c68461537cf2)

Aki Tuomi reports Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

5.3CVSS7.1AI score0.02476EPSS
SaveExploits0References3
OSV
OSV
added 2019/12/13 5:15 p.m.6 views

ALPINE-CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS6.8AI score0.02476EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/13 5:15 p.m.36 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS1.8AI score
SaveExploits0References6
NVD
NVD
added 2019/12/13 5:15 p.m.28 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS5.1AI score0.02476EPSS
SaveExploits0References6
Prion
Prion
added 2019/12/13 5:15 p.m.28 views

Null pointer dereference

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5CVSS5.1AI score0.02476EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2019/12/13 4:34 p.m.43 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.4AI score0.02476EPSS
SaveExploits0References6
CVE
CVE
added 2019/12/13 4:34 p.m.124 views

CVE-2019-19722

CVE-2019-19722 affects Dovecot prior to 2.3.9.2, where a NULL pointer dereference in the push notification driver can crash the service when a crafted email uses a group address as sender or recipient. The issue is evidenced across multiple sources (CVE entry and vendor advisories) and is resolve...

5.3CVSS5.3AI score0.02476EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2019/12/13 4:34 p.m.64 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS6.4AI score0.02476EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2019/12/13 4:34 p.m.102 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS5.5AI score0.02476EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2019/12/13 1:08 p.m.36 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS1.8AI score0.02476EPSS
SaveExploits0References3
OSV
OSV
added 2019/12/13 10:00 a.m.10 views

UBUNTU-CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS7.1AI score0.02476EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2019/12/13 10:00 a.m.36 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS6.8AI score0.02476EPSS
SaveExploits0References4
Rows per page
Query Builder