Summary
[1:2.2.36-5.1]
- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
when scanning data in quoted strings, leading to out of bounds heap
memory writes (#1741788)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | dovecot | 1:2.2.36-5.el8_0.1 |
| Oracle Linux · 8 | dovecot-devel | 1:2.2.36-5.el8_0.1 |
| Oracle Linux · 8 | dovecot-mysql | 1:2.2.36-5.el8_0.1 |
| Oracle Linux · 8 | dovecot-pgsql | 1:2.2.36-5.el8_0.1 |
Vulnerabilities 1
-
Unscored —CVE-2019-11500 EPSS 62%
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for q…