Unrated

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an inval...

CVE-2019-10691 First seen on SecPulse Apr 25, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2019-10691 dovecot Fixed in: 2.3.6-r0
Debian DEBIAN-CVE-2019-10691 dovecot Fixed in: 1:2.3.4.1-4

Original description The description as published by the source.

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory lists.opensuse.org
advisory openwall.com
advisory dovecot.org
advisory security.gentoo.org
web lists.fedoraproject.org

Key facts

Severity: Unrated
Published: Apr 25, 2019
First seen on SecPulse: Apr 25, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52