Summary
It was discovered that Dovecot incorrectly handled reading certain headers
from the index. A local attacker could possibly use this issue to escalate
privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | dovecot | 1:2.2.9-1ubuntu2.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | dovecot | 1:2.2.22-1ubuntu2.10 |
| Ubuntu · 18.04 LTS 18.04:LTS | dovecot | 1:2.2.33.2-1ubuntu4.3 |
Vulnerabilities 1
-
High 8.8
In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker…
References
-
report
https://ubuntu.com/security/CVE-2019-7524