Unrated

In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and c...

CVE-2020-10958 First seen on SecPulse May 18, 2020

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2020-10958 dovecot Fixed in: 2.3.10.1-r0
Debian DEBIAN-CVE-2020-10958 dovecot Fixed in: 1:2.3.10.1+dfsg1-1

Original description The description as published by the source.

In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory openwall.com
advisory dovecot.org
advisory debian.org
advisory openwall.com
report seclists.org
web lists.opensuse.org
web packetstormsecurity.com
web lists.fedoraproject.org
web lists.fedoraproject.org
web usn.ubuntu.com

Key facts

Severity: Unrated
Published: May 18, 2020
First seen on SecPulse: May 18, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51