dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes

A flaw was found in dovecot. IMAP and ManageSieve protocol parsers do not properly handle the NULL byte when scanning data in quoted strings which leads to an out of bounds heap memory write. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

dovecot security update

1:2.2.36-3.1 - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes 1751383...

RHEL 8 : dovecot (RHSA-2019:2822)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2822 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and...

The vulnerability of the Dovecot email delivery agent, related to the ability to write beyond the memory boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the Dovecot email delivery agent is related to the possibility of writing beyond the memory boundaries due to incorrect handling of the null-terminator symbol '\0'. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fedora 29 : 1:dovecot (2019-59d60bd1fa)

CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

MGASA-2019-0261 Updated dovecot packages fix security vulnerability

Updated dovecot packages fix security vulnerability: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes...

Updated dovecot packages fix security vulnerability

Updated dovecot packages fix security vulnerability: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes...

Fedora Update for dovecot FEDORA-2019-59d60bd1fa

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GLSA-201908-29 : Dovecot: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-29 Dovecot: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Dovecot. Please review the CVE identifiers referenced below for details. Impact : An unauthenticated remote attacker could send a special...

Fedora 30 : 1:dovecot (2019-3844281be1)

CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora Update for dovecot FEDORA-2019-3844281be1

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Dovecot: Multiple vulnerabilities

Background Dovecot is an open source IMAP and POP3 email server. Description Multiple vulnerabilities have been discovered in Dovecot. Please review the CVE identifiers referenced below for details. Impact An unauthenticated remote attacker could send a specially crafted mail or use crafted IMAP...

[SECURITY] Fedora 30 Update: dovecot-2.3.7.2-1.fc30

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

Dovecot 2.3.0 < 2.3.6 Multiple DoS vulnerabilities

Dovecot is prone to multiple denial of service vulnerabilities in submission-login. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Fedora 29 : 1:dovecot (2019-1add9a328f)

dovecot updated to 2.3.7.1, pigeonhole to 0.5.7.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. ...

Security fix for the ALT Linux 8 package dovecot-pigeonhole version 1:0.5.5-alt1.M80P.1

1:0.5.5-alt1.M80P.1 built Aug. 30, 2019 Gleb Fotengauer-Malinovskiy in task 236782 Aug. 29, 2019 Gleb Fotengauer-Malinovskiy - Applied upstream security fix fixes CVE-2019-11500...

Security fix for the ALT Linux 8 package dovecot version 2.3.5-alt1.M80P.1

2.3.5-alt1.M80P.1 built Aug. 30, 2019 Gleb Fotengauer-Malinovskiy in task 236782 Aug. 29, 2019 Gleb Fotengauer-Malinovskiy - Applied upstream security fix fixes CVE-2019-11500...

Debian DLA-1901-1 : dovecot security update

Nick Roessler and Rafi Rubin discovered that the IMAP and ManageSieve protocol parsers in the Dovecot email server do not properly validate input both pre- and post-login. A remote attacker can take advantage of this flaw to trigger out of bounds heap memory writes, leading to information leaks o...

Debian: Security Advisory (DSA-4510-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1901-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...