Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 6 and 7: 2019-0261 Critical Dovecot IMAP Memory Corruption

mageia
Calendar Grey September 8, 2019
Dist Mageia Esm H88
Revised Postfix components tackle a severe vulnerability related to buffer overflow errors in SMTP command handler.
Updated dovecot packages fix security vulnerability: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap mem...

Summary

Updated dovecot packages fix security vulnerability:
IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes.

References

- https://bugs.mageia.org/show_bug.cgi?id=25371

- https://dovecot.org/pipermail/dovecot/2019-August/116875.html

- https://www.cve.org/CVERecord?id=CVE-2019-11500

Topics%20covered

Topics Covered

security advisory update memory corruption dovecot IMAP out of bounds Mageia

Resolution

SRPMS

- 6/core/dovecot-2.2.36.4-1.mga6

- 7/core/dovecot-2.3.7.2-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 08 Sep 2019
URL: https://advisories.mageia.org/MGASA-2019-0261.html
Type: security
CVE: CVE-2019-11500

Topics%20covered

Topics Covered

security advisory update memory corruption dovecot IMAP out of bounds Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here