SUSE: Security Advisory (SUSE-SU-2020:1379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : dovecot (CESA-2020:2901)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2901 advisory. - dovecot: malformed NOOP commands leads to DoS CVE-2020-10957 Note that Nessus has not tested for this issue but has instead relied only on the application's...

dovecot security update

1:2.3.8-4 - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866756 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation 1866761 - fix CVE-2020-12674 crash due to assert in RPA implementation 1866768 1:2.3.8-3 - fix CVE-2020-10957 dovecot: malformed NOOP...

Huawei EulerOS: Security Advisory for dovecot (EulerOS-SA-2020-1843)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dovecot security update

1:2.3.8-2.1 - fix CVE-2020-10957: malformed NOOP commands leads to DoS 1840353...

RHEL 8 : dovecot (RHSA-2020:2901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2901 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2020:1379-1)

This update for dovecot23 fixes the following issues : Security issues fixed : CVE-2020-10957: Fixed a crash caused by malformed NOOP commands bsc1171457. CVE-2020-10958: Fixed a use-after-free when receiving too many newlines bsc1171458. CVE-2020-10967: Fixed a crash in the lmtp and submission...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2020:1380-1)

This update for dovecot23 to 2.3.10 fixes the following issues : Security issues fixed : CVE-2020-10957: Fixed a crash caused by malformed NOOP commands bsc1171457. CVE-2020-10958: Fixed a use-after-free when receiving too many newlines bsc1171458. CVE-2020-10967: Fixed a crash in the lmtp and...

Fedora 32 : 1:dovecot (2020-1dee17d880)

CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn't start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to...

openSUSE Security Update : dovecot23 (openSUSE-2020-720)

This update for dovecot23 to 2.3.10 fixes the following issues : Security issues fixed : - CVE-2020-10957: Fixed a crash caused by malformed NOOP commands bsc1171457. - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines bsc1171458. - CVE-2020-10967: Fixed a crash in the lmtp...

Fedora 31 : 1:dovecot (2020-b60344c987)

CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn't start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to...

openSUSE: Security Advisory for dovecot23 (openSUSE-SU-2020:0720-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0720-1 Security update for dovecot23

This update for dovecot23 to 2.3.10 fixes the following issues: Security issues fixed: - CVE-2020-10957: Fixed a crash caused by malformed NOOP commands bsc1171457. - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines bsc1171458. - CVE-2020-10967: Fixed a crash in the lmtp an...

Security update for dovecot23 (important)

openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2020:0720-1 Rating: important References: 1171456 1171457 1171458 Cross-References: CVE-2020-10957 CVE-2020-10958 CVE-2020-10967 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is...

SUSE-SU-2020:1379-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-10957: Fixed a crash caused by malformed NOOP commands bsc1171457. - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines bsc1171458. - CVE-2020-10967: Fixed a crash in the lmtp and submissi...

Security fix for the ALT Linux 9 package dovecot version 2.3.10.1-alt1

2.3.10.1-alt1 built May 21, 2020 Gleb Fotengauer-Malinovskiy in task 252013 May 20, 2020 Gleb Fotengauer-Malinovskiy - Updated to 2.3.10.1 fixes CVE-2020-10957, CVE-2020-10958, CVE-2020-10967...

[SECURITY] [DSA 4690-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4690-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 20, 2020 https://www.debian.org/security/faq -...

Ubuntu 20.04 LTS : Dovecot vulnerabilities (USN-4361-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4361-1 advisory. Philippe Antoine discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of service...

Dovecot 2.3.0 < 2.3.10 Multiple Vulnerabilities

Dovecot is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...