Back to search
CVE-2020-7957
Published: Feb 12, 2020
Modified: Aug 4, 2024
PUBLISHED
CVSS v3.0
3.1
LOW
Description
The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
CVSS v3.0 Details
CVSS v3.0 Vector
CVSS:3.0/AC:H/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:R
Attack Complexity
High
Attack Vector
Network
Availability
Low
Confidentiality
None
Integrity
None
Privileges Required
None
Scope
Unchanged
User Interaction
Required
References
https://dovecot.org/security
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2020/02/12/2
x_refsource_CONFIRM
https://dovecot.org/pipermail/dovecot-news/2020-February/000430.html
x_refsource_CONFIRM
FEDORA-2020-10a58fda28
vendor-advisory
x_refsource_FEDORA
FEDORA-2020-0e6a67af5a
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now