Red Hat Security AdvisoryRHSA-2020:2901
dovecot security update
Released 2020-07-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) dovecot-1:2.3.8-2.el8_2.1, dovecot-devel-1:2.3.8-2.el8_2.1
- Red Hat Enterprise Linux AppStream (v. 8) dovecot-1:2.3.8-2.el8_2.1, dovecot-mysql-1:2.3.8-2.el8_2.1, dovecot-pgsql-1:2.3.8-2.el8_2.1 +1
Fixes 1 record
Priority MEDIUM 43
In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07167 · Published 2020-05-18 · Fixed CWE-476
