Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2020-25275 →

DEBIAN-CVE-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain c...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 dovecot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.13+dfsg1-1"}]}]

Debian:13 dovecot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.13+dfsg1-1"}]}]

Debian:14 dovecot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.13+dfsg1-1"}]}]

Références

advisory security-tracker.debian.org