Summary
[1:2.3.8-2.1]
- fix CVE-2020-10957: malformed NOOP commands leads to DoS (#1840353)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | dovecot | 1:2.3.8-2.el8_2.1 |
| Oracle Linux · 8 | dovecot-devel | 1:2.3.8-2.el8_2.1 |
| Oracle Linux · 8 | dovecot-mysql | 1:2.3.8-2.el8_2.1 |
| Oracle Linux · 8 | dovecot-pgsql | 1:2.3.8-2.el8_2.1 |
| Oracle Linux · 8 | dovecot-pigeonhole | 1:2.3.8-2.el8_2.1 |
Vulnerabilities 1
-
High 7.5
In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Der…