Unrated

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submissio...

CVE-2020-10957 First seen on SecPulse May 18, 2020

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2020-10957 dovecot Fixed in: 2.3.10.1-r0
Debian DEBIAN-CVE-2020-10957 dovecot Fixed in: 1:2.3.10.1+dfsg1-1

Original description The description as published by the source.

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory openwall.com
advisory dovecot.org
advisory debian.org
advisory openwall.com
report seclists.org
web lists.opensuse.org
web packetstormsecurity.com
web lists.fedoraproject.org
web lists.fedoraproject.org
web usn.ubuntu.com

Key facts

Severity: Unrated
Published: May 18, 2020
First seen on SecPulse: May 18, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50