304 matches found
openSUSE: Security Advisory for dovecot23 (openSUSE-SU-2020:1241-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1241-1 Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. - CVE-2020-12674: improper implementation of RPA mechanism bsc1174923. This update was imported from the SUSE:SLE-15-SP1:Update update project...
Security update for dovecot23 (important)
openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2020:1241-1 Rating: important References: 1174922 1174923 Cross-References: CVE-2020-12673 CVE-2020-12674 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available...
SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2020:2274-1)
This update for dovecot22 fixes the following issues : CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. CVE-2020-12674: improper implementation of RPA mechanism bsc1174923. Note that Tenable Network Security has extracted the preceding description blo...
SUSE-SU-2020:2274-1 Security update for dovecot22
This update for dovecot22 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. - CVE-2020-12674: improper implementation of RPA mechanism bsc1174923...
SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2020:2267-1)
This update for dovecot23 fixes the following issues : CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. CVE-2020-12674: improper implementation of RPA mechanism bsc1174923. Note that Tenable Network Security has extracted the preceding description blo...
Updated dovecot packages fix security vulnerability
CVE-2020-12100: Receiving mail with deeply nested MIME parts leads to resource exhaustion as Dovecot attempts to parse it. CVE-2020-12673: Dovecot's NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash. CVE-2020-12674:...
MGASA-2020-0330 Updated dovecot packages fix security vulnerability
CVE-2020-12100: Receiving mail with deeply nested MIME parts leads to resource exhaustion as Dovecot attempts to parse it. CVE-2020-12673: Dovecot's NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash. CVE-2020-12674:...
SUSE-SU-2020:2267-1 Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. - CVE-2020-12674: improper implementation of RPA mechanism bsc1174923...
SUSE-SU-2020:2266-1 Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. - CVE-2020-12674: improper implementation of RPA mechanism bsc1174923...
Denial Of Service (DoS)
Dovecot is vulnerable to denial of service DoS. An attacker can send a specially formatted RPA request to crash the auth service because a length of zero is mishandled...
Debian DLA-2328-1 : dovecot security update
Several vulnerabilities have been discovered in the Dovecot email server. CVE-2020-12100 Receiving mail with deeply nested MIME parts leads to resource exhaustion as Dovecot attempts to parse it. CVE-2020-12673 Dovecot's NTLM implementation does not correctly check message buffer size, which lead...
Debian: Security Advisory (DLA-2328-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : mail/dovecot -- multiple vulnerabilities (87a07de1-e55e-4d51-bb64-8d117829a26a)
Aki Tuomi reports : Parsing mails with a large number of MIME parts could have resulted in excessive CPU usage or a crash due to running out of stack memory.. Dovecot's NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash...
CVE-2020-12674
A flaw was found in dovecot. An attacker can use the way dovecot handles RPA Remote Passphrase Authentication to crash the authentication process repeatedly preventing login. The highest threat from this vulnerability is to system availability. Mitigation Upstream suggests that this flaw can be...
Dovecot 2.2 < 2.3.11.3 Multiple DoS Vulnerabilities
Dovecot is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2020-12674
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...
Cross site request forgery (csrf)
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...
