CVE-2019-11500
Publicada em · Atualizada em
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 62%
probabilidade de exploração
62%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00024.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-10/msg00026.htmlhttps://access.redhat.com/errata/RHSA-2019:2822https://access.redhat.com/errata/RHSA-2019:2836https://access.redhat.com/errata/RHSA-2019:2885https://dovecot.org/pipermail/dovecot-news/2019-August/000417.htmlhttps://lists.debian.org/debian-lts-announce/2019/08/msg00035.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GYTZLLDNIFWT7D7JSB25ERJNMOR4CQ3/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVHY3MU2OK2EWZJFGNDSAOMD42L7DFPX/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YSJVVVRAE3SITC2ZLGCPMFDN3WVYZBWF/https://security.gentoo.org/glsa/201908-29https://www.dovecot.org/security.html