2581 matches found
UBUNTU-CVE-2020-12674
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...
CVE-2020-12674
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...
PT-2020-5172 · Dovecot +6 · Dovecot +6
Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.11.3 Description: The issue is caused by uncontrolled recursion in submission, lmtp, and lda, allowing remote attackers to cause a denial of service via a crafted e-mail message with deeply nested MIME parts...
DSA-4745-1 dovecot - security update
Bulletin has no description...
PT-2020-5176 · Dovecot +6 · Dovecot +6
Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.11.3 Description: The issue is related to incorrect input validation in the Dovecot mail server, which can be exploited by a remote attacker. This exploitation can lead to a disruption in the authentication servi...
PT-2020-5171 · Dovecot +6 · Dovecot +6
Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.11.3 Description: The issue is related to incorrect input validation in the Dovecot mail server. It can be exploited by a remote attacker who sends a specially formatted RPA request, leading to a crash in the...
Denial Of Service (DoS)
Dovecot is vulnerable to denial of service DoS. A remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart...
Denial Of Service (DoS)
Dovecot is vulnerable to denial of service. A malicious SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under when there are multiple newlines after a command...
Denial Of Service (DoS)
dovecot is vulnerable to denial of service DoS. The IMAP and LMTP components in Dovecot mishandle snippet generation when many characters must be read to compute the snippet and a trailing character exists. This causes a denial of service in which the recipient cannot read all of their messages...
Denial Of Service (DoS)
dovecot is vulnerable to denial of service DoS. The vulnerability exists as an malformed NOOP commands leads to DoS...
Oracle Linux 8 : dovecot (ELSA-2020-2901)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2901 advisory. 1:2.3.8-2.1 - fix CVE-2020-10957: malformed NOOP commands leads to DoS 1840353 Tenable has extracted the preceding description block directly from the Oracle...
RHEL 8 : dovecot (RHSA-2020:2901)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2901 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and...
dovecot security update
1:2.3.8-2.1 - fix CVE-2020-10957: malformed NOOP commands leads to DoS 1840353...
Important: Red Hat Security Advisory: dovecot security update
An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
dovecot: malformed NOOP commands leads to DoS
A flaw was found in Dovecot, where it did not properly handle certain malformed NOOP commands. This flaw allows a malicious attacker to cause the submission, submission-login, or lmtp services to crash by sending specially crafted commands...
dovecot:fuzz-smtp-server: Heap-buffer-overflow in smtp_command_parse_line
Project: https://github.com/dovecot/core.git Detailed Report: https://oss-fuzz.com/testcase?key=6020231943421952 Project: dovecot Fuzzing Engine: afl Fuzz Target: fuzz-smtp-server Job Type: aflasandovecot Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000007100 Cra...
dovecot:fuzz-smtp-server: Heap-buffer-overflow in uni_utf8_get_char_n
Project: https://github.com/dovecot/core.git Detailed Report: https://oss-fuzz.com/testcase?key=5271279639986176 Project: dovecot Fuzzing Engine: afl Fuzz Target: fuzz-smtp-server Job Type: aflasandovecot Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000009900 Cra...
Dovecot Denial of Service (CVE-2020-10967)
A denial-of-service vulnerability exists in Dovecot. Successful exploitation of this vulnerability could cause a denial-of-service condition...
Dovecot Null Pointer Dereference (CVE-2020-10957)
A Null pointer dereference vulnerability exists in Dovecot. Successful exploitation results in a denial of service condition on the affected service...
dovecot.2317879.n4.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184727 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...