Vulnerability Bulletins |
DSA-4510 dovecot - security update |
|
| Affected software | Debian |
|
Nick Roessler and Rafi Rubin discovered that the IMAP and ManageSieveprotocol parsers in the Dovecot email server do not properly validateinput (both pre- and post-login). A remote attacker can take advantageof this flaw to trigger out of bounds heap memory writes, leading toinformation leaks or potentially the execution of arbitrary code. More info: https://www.debian.org/security/2019/dsa-4510 |
|