In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
References
Configurations
History
21 Nov 2024, 04:56
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00059.html - | |
References | () http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html - | |
References | () http://seclists.org/fulldisclosure/2020/May/37 - Exploit, Third Party Advisory | |
References | () http://www.openwall.com/lists/oss-security/2020/05/18/1 - Mailing List, Third Party Advisory | |
References | () https://dovecot.org/security - Vendor Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4AAX2MJEULPVSRZOBX3PNPFSYP4FM4TT/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EYZU6CHA3VMYYAUCMHSCCQKJEVEIKPQ2/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTZN2VW55ZC2AQBGBJMLRJSZIKSB2NS6/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWHUUAFPC6XGIXYFIPTNBXLHPNM4W6/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XKKAL3OMG76ZZ7CIEMQP2K6KCTD2RAKE/ - | |
References | () https://usn.ubuntu.com/4361-1/ - | |
References | () https://www.debian.org/security/2020/dsa-4690 - | |
References | () https://www.openwall.com/lists/oss-security/2020/05/18/1 - Mailing List, Third Party Advisory |
07 Nov 2023, 03:14
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2020-05-18 15:15
Updated : 2024-11-21 04:56
NVD link : CVE-2020-10967
Mitre link : CVE-2020-10967
CVE.ORG link : CVE-2020-10967
JSON object : View
Products Affected
dovecot
- dovecot
CWE
CWE-20
Improper Input Validation