Red Hat Security AdvisoryRHSA-2020:4763
dovecot security update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) dovecot-1:2.3.8-4.el8, dovecot-devel-1:2.3.8-4.el8
- Red Hat Enterprise Linux AppStream (v. 8) dovecot-1:2.3.8-4.el8, dovecot-mysql-1:2.3.8-4.el8, dovecot-pgsql-1:2.3.8-4.el8 +1
Fixes 2 records
Priority LOW 35
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.08153 · Published 2020-05-18 · Fixed CWE-20
Priority LOW 33
In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06122 · Published 2020-05-18 · Fixed CWE-416
