CVE-2019-10691

Published: Apr 24, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20190418 CVE-2019-10691: JSON encoder in Dovecot 2.3 incorrecty assert-crashes when encountering invalid UTF-8 characters.

mailing-list

x_refsource_MLIST

[dovecot-news] 20190418 CVE-2019-10691: JSON encoder in Dovecot 2.3 incorrecty assert-crashes when encountering invalid UTF-8 characters.

mailing-list

x_refsource_MLIST

openSUSE-SU-2019:1312

vendor-advisory

x_refsource_SUSE

FEDORA-2019-1b61a528dd

vendor-advisory

x_refsource_FEDORA

GLSA-201908-29

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-10691

Description

Affected Products

References