Ubuntu 18.04 LTS USN-3928-1 Moderate: Dovecot Privilege Escalation

ubuntu

April 1, 2019

Dovecot could be made to crash or run programs as an administrator if it opened a specially crafted file.

Summary

Dovecot could be made to crash or run programs as an administrator

if it opened a specially crafted file.

Software Description:

- dovecot: IMAP and POP3 email server

Details:

It was discovered that Dovecot incorrectly handled reading certain headers

from the index. A local attacker could possibly use this issue to escalate

privileges.

Topics Covered

security advisory moderate privilege escalation ubuntu dovecot administrative access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  dovecot-core                    1:2.3.2.1-1ubuntu3.2

Ubuntu 18.04 LTS:
  dovecot-core                    1:2.2.33.2-1ubuntu4.3

Ubuntu 16.04 LTS:
  dovecot-core                    1:2.2.22-1ubuntu2.10

Ubuntu 14.04 LTS:
  dovecot-core                    1:2.2.9-1ubuntu2.6

In general, a standard system update will make all the necessary changes.