ALPINE-CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

DEBIAN-CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

ALPINE-CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

Cross site request forgery (csrf)

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

Design/Logic Flaw

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

Out-of-bounds

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

[SECURITY] [DSA 4745-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4745-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4745-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4745-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...

CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

CVE-2020-12674

CVE-2020-12674 affects Dovecot before 2.3.11.3. The flaw arises in the Remote Passphrase Authentication (RPA) handling, where a zero-length input is mishandled, causing the authentication service to crash. This is listed alongside CVE-2020-12100 and CVE-2020-12673 in multiple advisories. Remediat...

CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

CVE-2020-12673

CVE-2020-12673 affects Dovecot prior to 2.3.11.3. An out-of-bounds read in the NTLM authentication handling can crash the auth service when processing a specially formatted NTLM request. Public advisories and package updates confirm the fix is included in Dovecot 2.3.11.3 (and related security up...

CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

EUVD-2020-4416

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

CVE-2020-12100

CVE-2020-12100 affects Dovecot before 2.3.11.3, where uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause resource exhaustion/denial of service via a crafted email with deeply nested MIME parts. The issue is addressed by upgrading to a fixed version (2.3.11.3 or n...

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...