Lucene search
K

32 matches found

Tenable Nessus
Tenable Nessus
added 2019/09/30 12:0 a.m.37 views

EulerOS 2.0 SP8 : dovecot (EulerOS-SA-2019-2071)

According to the version of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs...

9.8CVSS8.1AI score0.38348EPSS
Exploits1References2
OSV
OSV
added 2019/08/29 2:15 p.m.27 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS9.8AI score
Exploits0References13
NVD
NVD
added 2019/08/29 2:15 p.m.18 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8.9AI score0.38348EPSS
Exploits1References13
Prion
Prion
added 2019/08/29 2:15 p.m.25 views

Remote code execution

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

7.5CVSS9.5AI score0.38348EPSS
Exploits1References13Affected Software4
CVE
CVE
added 2019/08/29 1:51 p.m.325 views

CVE-2019-11500

CVE-2019-11500 affects Dovecot (and Pigeonhole) where protocol processing mishandles NULL bytes, enabling out-of-bounds writes and remote code execution. Affected: Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2; Pigeonhole before 0.5.7.2. Root cause: improper NULL-byte handling in IMAP/ManageSi...

9.8CVSS7.7AI score0.38348EPSS
Exploits1References13Affected Software2
AlpineLinux
AlpineLinux
added 2019/08/29 1:51 p.m.52 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS8AI score0.38348EPSS
Exploits1
Debian CVE
Debian CVE
added 2019/08/29 1:51 p.m.30 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS9.7AI score0.38348EPSS
Exploits1
Cvelist
Cvelist
added 2019/08/29 1:51 p.m.24 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

7.8AI score0.38348EPSS
Exploits1References13
UbuntuCve
UbuntuCve
added 2019/08/28 12:0 p.m.46 views

CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS7.4AI score0.38348EPSS
Exploits1References5
OSV
OSV
added 2019/08/28 12:0 p.m.0 views

UBUNTU-CVE-2019-11500

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...

9.8CVSS7.5AI score0.38348EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2019/08/28 12:0 a.m.3 views

PT-2019-3225 · Dovecot +5 · Dovecot +6

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.2.36.4 Dovecot versions prior to 2.3.7.2 Pigeonhole versions prior to 0.5.7.2 Description: The issue is related to the mishandling of '0' characters in protocol processing, which can lead to out-of-bounds writes an...

10CVSS7.2AI score0.38348EPSS
Exploits14References113
Check Point Advisories
Check Point Advisories
added 2010/03/21 12:0 a.m.1 views

Firebird XDR Operation Request Handling Denial of Service (CVE-2008-0387)

There exists a null-dereference overflow vulnerability in Firebird database project. The flaw resides in the External Data Representation XDR protocol processing routines. A remote unauthenticated attacker may exploit this vulnerability by sending crafted message to the target server. Successful...

7.8CVSS6.4AI score0.5991EPSS
Exploits3
Rows per page
Query Builder