Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:0997-1

Опубликовано: 23 апр. 2019
Источник: suse-cvrf

Описание

Security update for dovecot23

This update for dovecot23 fixes the following issues:

Security issue fixed:

  • CVE-2019-10691: Fixed a denial of service via reachable assertion when processing invalid UTF-8 characters (bsc#1132501).

Список пакетов

SUSE Linux Enterprise Module for Server Applications 15
dovecot23-2.3.3-4.13.1
dovecot23-backend-mysql-2.3.3-4.13.1
dovecot23-backend-pgsql-2.3.3-4.13.1
dovecot23-backend-sqlite-2.3.3-4.13.1
dovecot23-devel-2.3.3-4.13.1
dovecot23-fts-2.3.3-4.13.1
dovecot23-fts-lucene-2.3.3-4.13.1
dovecot23-fts-solr-2.3.3-4.13.1
dovecot23-fts-squat-2.3.3-4.13.1

Ссылки

Описание

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-2.3.3-4.13.1
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-backend-mysql-2.3.3-4.13.1
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-backend-pgsql-2.3.3-4.13.1
SUSE Linux Enterprise Module for Server Applications 15:dovecot23-backend-sqlite-2.3.3-4.13.1
Ссылки