Summary
Philippe Antoine discovered that Dovecot incorrectly handled certain data.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2020-10957, CVE-2020-10967)
Philippe Antoine discovered that Dovecot incorrectly handled certain data.
An attacker could possibly use this issue to cause a denial of service or execute
arbitrary code. (CVE-2020-10958)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | dovecot | 1:2.3.7.2-1ubuntu3.1 |
Vulnerabilities 3
-
High 7.5
In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Der…
-
Medium 5.3
In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-lo…
-
Medium 5.3
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail w…