5 matches found
MGASA-2019-0261 Updated dovecot packages fix security vulnerability
Updated dovecot packages fix security vulnerability: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes...
MGASA-2018-0114 Updated dovecot packages fix security vulnerability
A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to...
Updated dovecot packages fix security vulnerability
A buffer overflow may occur when handling pop3deletedflag setting. This can lead to crashing POP3 sessions in normal use...
MGASA-2015-0452 Updated dovecot packages fix security vulnerability
A buffer overflow may occur when handling pop3deletedflag setting. This can lead to crashing POP3 sessions in normal use...
Oracle Linux 5 / 6 : dovecot (ELSA-2011-1187)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1187 advisory. 1:2.0.9-2.1 - fix potential crash when parsing header names that contain NUL characters 728672 Tenable has extracted the preceding description block directl...