Unrated
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
CVE-2020-10967
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2020-10967 dovecot Fixed in: 2.3.10.1-r0
- Debian DEBIAN-CVE-2020-10967 dovecot Fixed in: 1:2.3.10.1+dfsg1-1
References
- advisory openwall.com
- advisory dovecot.org
- advisory debian.org
- advisory openwall.com
- report seclists.org
- web lists.opensuse.org
- web packetstormsecurity.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web usn.ubuntu.com