Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-10957

Опубликовано: 18 мая 2020
Источник: debian

Описание

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
dovecotfixed1:2.3.10.1+dfsg1-1package
dovecotnot-affectedstretchpackage
dovecotnot-affectedjessiepackage

Примечания

  • https://www.openwall.com/lists/oss-security/2020/05/18/1

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

CVSS3: 7.5
redhat
больше 5 лет назад

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

CVSS3: 7.5
nvd
больше 5 лет назад

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

github
больше 3 лет назад

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

oracle-oval
больше 5 лет назад

ELSA-2020-2901: dovecot security update (IMPORTANT)