Description
Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dovecot | 1:1.2.11-1 | — |
| Debian 13 | dovecot | 1:1.2.11-1 | — |
| Debian 12 | dovecot | 1:1.2.11-1 | — |
References
- http://security-tracker.debian.org/tracker/CVE-2010-0745
- ADV-2010-1107 vdb-entry
- [dovecot] 20100227 Possible CPU Denial-Of-Service attack to dovecot IMAP. mailing-list
- SUSE-SR:2010:011 vendor-advisory
- MDVSA-2010:104 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=572268
- ADV-2010-1226 vdb-entry
- [oss-security] 20100310 CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header mailing-list
- [dovecot-news] 20100308 v1.2.11 released mailing-list
- [oss-security] 20100401 Re: CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header mailing-list