Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:0876-1

Опубликовано: 04 апр. 2019
Источник: suse-cvrf

Описание

Security update for dovecot23

This update for dovecot23 fixes the following issue:

Security issue fixed:

  • CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation (bsc#1130116).

Список пакетов

SUSE Linux Enterprise Module for Server Applications 15
dovecot23-2.3.3-4.10.1
dovecot23-backend-mysql-2.3.3-4.10.1
dovecot23-backend-pgsql-2.3.3-4.10.1
dovecot23-backend-sqlite-2.3.3-4.10.1
dovecot23-devel-2.3.3-4.10.1
dovecot23-fts-2.3.3-4.10.1
dovecot23-fts-lucene-2.3.3-4.10.1
dovecot23-fts-solr-2.3.3-4.10.1
dovecot23-fts-squat-2.3.3-4.10.1

Ссылки

Описание

In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components.

Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-2.3.3-4.10.1
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-backend-mysql-2.3.3-4.10.1
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-backend-pgsql-2.3.3-4.10.1
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-backend-sqlite-2.3.3-4.10.1
Ссылки