Description
In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: Low
Affected Packages4 packages
🔴Vulnerability Details
3GHSAGHSA-v4pj-8r82-6phx: In Dovecot before 2↗2022-05-24 OSVdovecot vulnerabilities↗2020-05-18 OSVCVE-2020-10958: In Dovecot before 2↗2020-05-18 📋Vendor Advisories
3UbuntuDovecot vulnerabilities↗2020-05-18 Red Hatdovecot: command followed by sufficient number of newlines leads to use-after-free↗2020-05-18 DebianCVE-2020-10958: dovecot - In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthentica...↗2020 💬Community
2BugzillaCVE-2020-10958 dovecot: command followed by sufficient number of newlines leads to use-after-free [fedora-all]↗2020-05-18 BugzillaCVE-2020-10958 dovecot: command followed by sufficient number of newlines leads to use-after-free↗2020-05-11