Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

Ubuntu 19.04 and 18.10: USN-3961-1 Severe Dovecot DoS Issues

ubuntu
Calendar Grey April 30, 2019
Dist Ubuntu Esm H88
Important notice for Ubuntu users regarding Dovecot malfunctions triggered by high network load. Review for solutions.
Dovecot could be made to crash if it received specially crafted network traffic.

Summary

Dovecot could be made to crash if it received specially crafted network

traffic.

Software Description:

- dovecot: IMAP and POP3 email server

Details:

It was discovered that the Dovecot Submission login service incorrectly

handled certain operations. A remote attacker could possibly use this issue

to cause Dovecot to crash, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu network attack Dovecot

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  dovecot-core                    1:2.3.4.1-1ubuntu2.2
  dovecot-submissiond             1:2.3.4.1-1ubuntu2.2

Ubuntu 18.10:
  dovecot-core                    1:2.3.2.1-1ubuntu3.4
  dovecot-submissiond             1:2.3.2.1-1ubuntu3.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3961-1

CVE-2019-11494, CVE-2019-11499

Severity
critical
Lowest
Low
Medium
High
Critical

April 30, 2019

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu network attack Dovecot

Package Information

https://launchpad.net/ubuntu/+source/dovecot/1:2.3.4.1-1ubuntu2.2
https://launchpad.net/ubuntu/+source/dovecot/1:2.3.2.1-1ubuntu3.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.