Dovecot Pigeonhole vulnerabilities

1 known vulnerability affecting dovecot/pigeonhole.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2019-11500CRITICALCVSS 9.8Exploitedfixed in 0.5.7.22019-08-29

CVE-2019-11500 [CRITICAL] CWE-787 CVE-2019-11500: In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol proces In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.