This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-25275 →

DEBIAN-CVE-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain c...

Original description

The description as published by the source.

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 dovecot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.13+dfsg1-1"}]}]

Debian:13 dovecot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.13+dfsg1-1"}]}]

Debian:14 dovecot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.13+dfsg1-1"}]}]

References

advisory security-tracker.debian.org