Lucene search
+L

38 matches found

Tenable Nessus
Tenable Nessus
•added 2019/12/06 12:00 a.m.•34 views

NewStart CGSL MAIN 4.06 : dovecot Vulnerability (NS-SA-2019-0211)

The remote NewStart CGSL host, running version MAIN 4.06, has dovecot packages installed that are affected by a vulnerability: - In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters...

9.8CVSS8.2AI score0.62324EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/12/02 12:00 a.m.•53 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : dovecot Vulnerability (NS-SA-2019-0220)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has dovecot packages installed that are affected by a vulnerability: - In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0'...

9.8CVSS8.2AI score0.62324EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/11/08 12:00 a.m.•62 views

EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2019-2243)

According to the version of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs...

9.8CVSS7.8AI score0.62324EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/11/07 12:00 a.m.•56 views

Amazon Linux 2 : dovecot (ALAS-2019-1347)

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.CVE-2019-11500 C Tenable Network Security, Inc. Th...

9.8CVSS8AI score0.62324EPSS
SaveExploits1References2
Amazon
Amazon
•added 2019/11/04 12:00 a.m.•70 views

Important: dovecot

Issue Overview: In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.CVE-2019-11500 Affected Packages:...

9.8CVSS8.2AI score0.62324EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2019/09/30 12:00 a.m.•51 views

EulerOS 2.0 SP8 : dovecot (EulerOS-SA-2019-2071)

According to the version of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs...

9.8CVSS7.8AI score0.62324EPSS
SaveExploits1References2
OSV
OSV
•added 2019/08/29 2:15 p.m.•54 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS9.8AI score
SaveExploits0References13
NVD
NVD
•added 2019/08/29 2:15 p.m.•31 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8.9AI score0.62324EPSS
SaveExploits1References13
Prion
Prion
•added 2019/08/29 2:15 p.m.•31 views

Remote code execution

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

7.5CVSS9.5AI score0.62324EPSS
SaveExploits1References13Affected Software4
AlpineLinux
AlpineLinux
•added 2019/08/29 1:51 p.m.•62 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8.3AI score0.62324EPSS
SaveExploits1
Cvelist
Cvelist
•added 2019/08/29 1:51 p.m.•59 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

7.8AI score0.62324EPSS
SaveExploits1References13
CVE
CVE
•added 2019/08/29 1:51 p.m.•372 views

CVE-2019-11500

CVE-2019-11500 affects Dovecot (and Pigeonhole) where protocol processing mishandles NULL bytes, enabling out-of-bounds writes and remote code execution. Affected: Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2; Pigeonhole before 0.5.7.2. Root cause: improper NULL-byte handling in IMAP/ManageSi...

9.8CVSS8.3AI score0.62324EPSS
SaveExploits1References13Affected Software2
Debian CVE
Debian CVE
•added 2019/08/29 1:51 p.m.•55 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8.3AI score0.62324EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/29 12:00 a.m.•3 views

CVE-2019-11500: Out-of-bounds Write

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8.3AI score0.62324EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2019/08/28 12:00 p.m.•56 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8.3AI score0.62324EPSS
SaveExploits1References5
OSV
OSV
•added 2019/08/28 12:00 p.m.•9 views

UBUNTU-CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8.3AI score0.62324EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2019/08/28 12:00 a.m.•17 views

PT-2019-3225 · Dovecot +5 · Dovecot +6

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.2.36.4 Dovecot versions prior to 2.3.7.2 Pigeonhole versions prior to 0.5.7.2 Description: The issue is related to the mishandling of '0' characters in protocol processing, which can lead to out-of-bounds writes an...

10CVSS7.2AI score0.62324EPSS
SaveExploits14References113
Check Point Advisories
Check Point Advisories
•added 2010/03/21 12:00 a.m.•43 views

Firebird XDR Operation Request Handling Denial of Service (CVE-2008-0387)

There exists a null-dereference overflow vulnerability in Firebird database project. The flaw resides in the External Data Representation XDR protocol processing routines. A remote unauthenticated attacker may exploit this vulnerability by sending crafted message to the target server. Successful...

7.8CVSS6.4AI score0.45873EPSS
SaveExploits4
Rows per page
Query Builder