2388 matches found
CVE-2019-11500
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...
Debian DSA-4510-1 : dovecot - security update
Nick Roessler and Rafi Rubin discovered that the IMAP and ManageSieve protocol parsers in the Dovecot email server do not properly validate input both pre- and post-login. A remote attacker can take advantage of this flaw to trigger out of bounds heap memory writes, leading to information leaks o...
Ubuntu: Security Advisory (USN-4110-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security fix for the ALT Linux 9 package dovecot version 2.3.7.2-alt1
2.3.7.2-alt1 built Aug. 29, 2019 Gleb Fotengauer-Malinovskiy in task 236729 Aug. 28, 2019 Gleb Fotengauer-Malinovskiy - Updated to 2.3.7.2 fixes CVE-2019-11500...
FreeBSD : Dovecot -- improper input validation (abaaecda-ea16-43e2-bad0-d34a9ac576b1)
Aki Tuomi reports : Vulnerability Details : IMAP and ManageSieve protocol parsers do not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes. Risk : This vulnerability allows for out-of-bounds writes to objects stored on the heap up to 8096...
Ubuntu: Security Advisory (USN-4110-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-1901-1 dovecot - security update
Bulletin has no description...
Ubuntu 16.04 LTS / 18.04 LTS : Dovecot vulnerability (USN-4110-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4110-1 advisory. Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of...
Ubuntu 16.04 LTS / 18.04 LTS : Dovecot regression (USN-4110-3)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4110-3 advisory. USN-4110-1 fixed a vulnerability in Dovecot. The update introduced a regression causing a wrong check. This update fixes the problem. We apologize for...
USN-4110-4 dovecot regression
USN-4110-1 fixed a vulnerability in Dovecot. The update introduced a regression causing a wrong check. This update fixes the problem for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. We apologize for the inconvenience. Original advisory details: Nick Roessler and Rafi Rubin discovered that Dovecot...
USN-4110-4: Dovecot regression
USN-4110-1 fixed a vulnerability in Dovecot. The update introduced a regression causing a wrong check. This update fixes the problem for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. We apologize for the inconvenience. Original advisory details: Nick Roessler and Rafi Rubin discovered that Dovecot...
USN-4110-3 Dovecot regression
USN-4110-1 fixed a vulnerability in Dovecot. The update introduced a regression causing a wrong check. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker...
USN-4110-3: Dovecot regression
USN-4110-1 fixed a vulnerability in Dovecot. The update introduced a regression causing a wrong check. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker...
USN-4110-2 dovecot vulnerability
USN-4110-1 fixed a vulnerability in Dovecot. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to caus...
USN-4110-2: Dovecot vulnerability
USN-4110-1 fixed a vulnerability in Dovecot. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to caus...
USN-4110-1 dovecot vulnerability
Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
USN-4110-1: Dovecot vulnerability
Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
[SECURITY] [DSA 4510-1] dovecot security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4510-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 28, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4510-1] dovecot security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4510-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 28, 2019 https://www.debian.org/security/faq -...
UBUNTU-CVE-2019-11500
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...