2019-08-29 16:15:11 2019-09-06 17:15:11

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Dovecot Dovecot 2.2.30 Rc1 (not an official CPE) Dovecot Dovecot 2.2.30 - (not an official CPE) Dovecot Dovecot 2.2.29.1 (not an official CPE) Dovecot Dovecot 2.2.29 Rc1 (not an official CPE) Dovecot Dovecot 2.2.29 - (not an official CPE) Dovecot Dovecot 2.2.28 Rc2 (not an official CPE) Dovecot Dovecot 2.2.28 Rc1 (not an official CPE) Dovecot Dovecot 2.2.28 - (not an official CPE) Dovecot Dovecot 2.2.27 (not an official CPE) Dovecot Dovecot 2.2.26.0 (not an official CPE) Dovecot Dovecot 2.2.26 (not an official CPE) Dovecot Dovecot 2.2.25.4.2 (not an official CPE) Dovecot Dovecot 2.2.25.4 (not an official CPE) Dovecot Dovecot 2.2.25.3 (not an official CPE) Dovecot Dovecot 2.2.25.2 (not an official CPE) Dovecot Dovecot 2.2.25.1 (not an official CPE) Dovecot Dovecot 2.2.25 Rc1 (not an official CPE) Dovecot Dovecot 2.2.25 - (not an official CPE) Dovecot Dovecot 2.2.24.2 (not an official CPE) Dovecot Dovecot 2.2.24.1 (not an official CPE) Dovecot Dovecot 2.2.24 (not an official CPE) Dovecot Dovecot 2.2.23.1 (not an official CPE) Dovecot Dovecot 2.2.23 (not an official CPE) Dovecot Dovecot 2.2.22 Rc1 (not an official CPE) Dovecot Dovecot 2.2.22 - (not an official CPE) Dovecot Dovecot 2.2.21.2.2 (not an official CPE) Dovecot Dovecot 2.2.21.2 (not an official CPE) Dovecot Dovecot 2.2.21.1 (not an official CPE) Dovecot Dovecot 2.2.21 (not an official CPE) Dovecot Dovecot 2.2.20 Rc1 (not an official CPE) Dovecot Dovecot 2.2.20 - (not an official CPE) Dovecot Dovecot 2.2.19 Rc2 (not an official CPE) Dovecot Dovecot 2.2.19 Rc1 (not an official CPE) Dovecot Dovecot 2.2.19 - (not an official CPE) Dovecot Dovecot 2.2.18 (not an official CPE) Dovecot Dovecot 2.2.17 Rc2 (not an official CPE) Dovecot Dovecot 2.2.17 Rc1 (not an official CPE) Dovecot Dovecot 2.2.17 - (not an official CPE) Dovecot Dovecot 2.2.16 Rc1 (not an official CPE) Dovecot Dovecot 2.2.16 - (not an official CPE) Dovecot Dovecot 2.2.15 (not an official CPE) Dovecot Dovecot 2.2.14 Rc1 (not an official CPE) Dovecot Dovecot 2.2.14 - (not an official CPE) Dovecot 2.2.13 release candidate 1 Dovecot 2.2.13 Dovecot Dovecot 2.2.12 (not an official CPE) Dovecot Dovecot 2.2.11 (not an official CPE) Dovecot 2.2.10 Dovecot 2.2.9 Dovecot 2.2.8 Dovecot 2.2.7 Dovecot 2.2.6 Dovecot 2.2.5 Dovecot 2.2.4 Dovecot 2.2.3 Dovecot 2.2.2 Dovecot 2.2.1 Dovecot Dovecot 2.2.0 Rc7 (not an official CPE) Dovecot Dovecot 2.2.0 Rc6 (not an official CPE) Dovecot Dovecot 2.2.0 Rc5 (not an official CPE) Dovecot Dovecot 2.2.0 Rc4 (not an official CPE) Dovecot Dovecot 2.2.0 Rc3 (not an official CPE) Dovecot Dovecot 2.2.0 Rc2 (not an official CPE) Dovecot Dovecot 2.2.0 Rc1 (not an official CPE) Dovecot Dovecot 2.2.0 Beta2 (not an official CPE) Dovecot Dovecot 2.2.0 Beta1 (not an official CPE) Dovecot Dovecot 2.2.0 Alpha1 (not an official CPE) Dovecot Dovecot 2.2.0 - (not an official CPE) Dovecot 2.2.0 Dovecot 2.2 release candidate 7 Dovecot 2.2 release candidate 6 Dovecot 2.2 release candidate 5 Dovecot 2.2 release candidate 4 Dovecot 2.2 release candidate 3 Dovecot 2.2 release candidate 2 Dovecot 2.2 release candidate 1 Dovecot 2.1.17 Dovecot 2.1.16 Dovecot 2.1.15 Dovecot 2.1.14 Dovecot 2.1.13 Dovecot 2.1.12 Dovecot 2.1.11 Dovecot 2.1.10 Dovecot Dovecot 2.1.9 (not an official CPE) Dovecot 2.1.8 Dovecot 2.1.7 Dovecot 2.1.6 Dovecot 2.1.5 Dovecot 2.1.4 Dovecot 2.1.3 Dovecot 2.1.2 Dovecot 2.1.1 Dovecot Dovecot 2.1.0 Rc7 (not an official CPE) Dovecot Dovecot 2.1.0 Rc6 (not an official CPE) Dovecot Dovecot 2.1.0 Rc5 (not an official CPE) Dovecot Dovecot 2.1.0 Rc4 (not an official CPE) Dovecot Dovecot 2.1.0 Rc3 (not an official CPE) Dovecot Dovecot 2.1.0 Rc2 (not an official CPE) Dovecot Dovecot 2.1.0 Rc1 (not an official CPE) Dovecot Dovecot 2.1.0 Beta1 (not an official CPE) Dovecot Dovecot 2.1.0 Alpha2 (not an official CPE) Dovecot Dovecot 2.1.0 Alpha1 (not an official CPE) Dovecot Dovecot 2.1.0 - (not an official CPE) Dovecot 2.1.0 Dovecot 2.1 release candidate 7 Dovecot 2.1 release candidate 6 Dovecot 2.1 release candidate 5 Dovecot 2.1 release candidate 3 Dovecot 2.1 release candidate 2 Dovecot 2.1 release candidate 1 Dovecot 2.0.15 Dovecot 2.0.14 Dovecot 2.0.13 Dovecot 2.0.12 Dovecot 2.0.11 Dovecot 2.0.10 Dovecot 2.0.9 Dovecot 2.0.8 Dovecot 2.0.7 Dovecot 2.0.6 Dovecot 2.0.5 Dovecot 2.0.4 Dovecot 2.0.3 Dovecot 2.0.2 Dovecot 2.0.1 Dovecot Dovecot 2.0.0 Rc6 (not an official CPE) Dovecot Dovecot 2.0.0 Rc5 (not an official CPE) Dovecot Dovecot 2.0.0 Rc4 (not an official CPE) Dovecot Dovecot 2.0.0 Rc3 (not an official CPE) Dovecot Dovecot 2.0.0 Rc2 (not an official CPE) Dovecot Dovecot 2.0.0 Rc1 (not an official CPE) Dovecot Dovecot 2.0.0 Beta6 (not an official CPE) Dovecot Dovecot 2.0.0 Beta5 (not an official CPE) Dovecot Dovecot 2.0.0 Beta4 (not an official CPE) Dovecot Dovecot 2.0.0 Beta3 (not an official CPE) Dovecot Dovecot 2.0.0 Beta2 (not an official CPE) Dovecot Dovecot 2.0.0 Beta1 (not an official CPE) Dovecot Dovecot 2.0.0 Alpha3 (not an official CPE) Dovecot Dovecot 2.0.0 Alpha2 (not an official CPE) Dovecot Dovecot 2.0.0 Alpha1 (not an official CPE) Dovecot Dovecot 2.0.0 - (not an official CPE) Dovecot 2.0.0 Dovecot 2.0 beta1 Dovecot 1.2.15 Dovecot 1.2.14 Dovecot 1.2.13 Dovecot 1.2.12 Dovecot 1.2.11 Dovecot 1.2.10 Dovecot 1.2.9 Dovecot 1.2.7 Dovecot 1.2.7 Dovecot 1.2.6 Dovecot 1.2.5 Dovecot 1.2.4 Dovecot 1.2.3 Dovecot 1.2.2 Dovecot 1.2.1 Dovecot Dovecot 1.2.0 Rc1 (not an official CPE) Dovecot Dovecot 1.2.0 Beta4 (not an official CPE) Dovecot Dovecot 1.2.0 Beta3 (not an official CPE) Dovecot Dovecot 1.2.0 Beta2 (not an official CPE) Dovecot Dovecot 1.2.0 Beta1 (not an official CPE) Dovecot Dovecot 1.2.0 Alpha5 (not an official CPE) Dovecot Dovecot 1.2.0 Alpha4 (not an official CPE) Dovecot Dovecot 1.2.0 Alpha3 (not an official CPE) Dovecot Dovecot 1.2.0 Alpha2 (not an official CPE) Dovecot Dovecot 1.2.0 Alpha1 (not an official CPE) Dovecot Dovecot 1.2.0 - (not an official CPE) Dovecot 1.2.0 Dovecot Dovecot 1.1.0 Rc8 (not an official CPE) Dovecot Dovecot 1.1.0 Rc7 (not an official CPE) Dovecot Dovecot 1.1.0 Rc6 (not an official CPE) Dovecot Dovecot 1.1.0 Rc5 (not an official CPE) Dovecot Dovecot 1.1.0 Rc4 (not an official CPE) Dovecot Dovecot 1.1.0 Rc3 (not an official CPE) Dovecot Dovecot 1.1.0 Rc2 (not an official CPE) Dovecot Dovecot 1.1.0 Rc1 (not an official CPE) Dovecot Dovecot 1.1.0 Beta9 (not an official CPE) Dovecot Dovecot 1.1.0 Beta8 (not an official CPE) Dovecot Dovecot 1.1.0 Beta6 (not an official CPE) Dovecot Dovecot 1.1.0 Beta5 (not an official CPE) Dovecot Dovecot 1.1.0 Beta4 (not an official CPE) Dovecot Dovecot 1.1.0 Beta3 (not an official CPE) Dovecot Dovecot 1.1.0 Beta2 (not an official CPE) Dovecot Dovecot 1.1.0 Beta16 (not an official CPE) Dovecot Dovecot 1.1.0 Beta14 (not an official CPE) Dovecot Dovecot 1.1.0 Beta13 (not an official CPE) Dovecot Dovecot 1.1.0 Beta12 (not an official CPE) Dovecot Dovecot 1.1.0 Beta11 (not an official CPE) Dovecot Dovecot 1.1.0 Beta10 (not an official CPE) Dovecot Dovecot 1.1.0 Beta1 (not an official CPE) Dovecot Dovecot 1.1.0 Alpha6 (not an official CPE) Dovecot Dovecot 1.1.0 Alpha5 (not an official CPE) Dovecot Dovecot 1.1.0 Alpha4 (not an official CPE) Dovecot Dovecot 1.1.0 Alpha2 (not an official CPE) Dovecot Dovecot 1.1.0 Alpha1 (not an official CPE) Dovecot Dovecot 2.2.30.1 (not an official CPE) Dovecot Dovecot 2.2.30.2 (not an official CPE) Dovecot Dovecot 2.2.31 - (not an official CPE) Dovecot Dovecot 2.2.31 Rc1 (not an official CPE) Dovecot Dovecot 2.2.32 - (not an official CPE) Dovecot Dovecot 2.2.32 Rc1 (not an official CPE) Dovecot Dovecot 2.2.32 Rc2 (not an official CPE) Dovecot Dovecot 2.2.33 - (not an official CPE) Dovecot Dovecot 2.2.33 Rc1 (not an official CPE) Dovecot Dovecot 2.2.33.1 (not an official CPE) Dovecot Dovecot 2.2.33.2 (not an official CPE) Dovecot Dovecot 2.2.34 (not an official CPE) Dovecot Dovecot 2.2.35 (not an official CPE) Dovecot Dovecot 2.2.36 - (not an official CPE) Dovecot Dovecot 2.2.36 Rc1 (not an official CPE) Dovecot Dovecot 2.2.36.1 (not an official CPE) Dovecot Dovecot 2.2.36.3 (not an official CPE) Dovecot Dovecot 2.3.0 - (not an official CPE) Dovecot Dovecot 2.3.0 Rc1 (not an official CPE) Dovecot Dovecot 2.3.0.1 (not an official CPE) Dovecot Dovecot 2.3.1 (not an official CPE) Dovecot Dovecot 2.3.2 - (not an official CPE) Dovecot Dovecot 2.3.2 Rc1 (not an official CPE) Dovecot Dovecot 2.3.2.1 (not an official CPE) Dovecot Dovecot 2.3.3 - (not an official CPE) Dovecot Dovecot 2.3.3 Rc1 (not an official CPE) Dovecot Dovecot 2.3.4 (not an official CPE) Dovecot Dovecot 2.3.4.1 (not an official CPE) Dovecot Dovecot 2.3.5 (not an official CPE) Dovecot Dovecot 2.3.5.1 (not an official CPE) Dovecot Dovecot 2.3.5.2 (not an official CPE) Dovecot Dovecot 2.3.6 (not an official CPE) Dovecot Dovecot 2.3.7 (not an official CPE) Dovecot Dovecot 2.3.7.1 (not an official CPE) Dovecot Pigeonhole 0.1.0 (not an official CPE) Dovecot Pigeonhole 0.1.1 (not an official CPE) Dovecot Pigeonhole 0.1.2 (not an official CPE) Dovecot Pigeonhole 0.1.3 (not an official CPE) Dovecot Pigeonhole 0.1.4 (not an official CPE) Dovecot Pigeonhole 0.2.0 (not an official CPE) Dovecot Pigeonhole 0.2.1 (not an official CPE) Dovecot Pigeonhole 0.2.2 (not an official CPE) Dovecot Pigeonhole 0.2.3 (not an official CPE) Dovecot Pigeonhole 0.2.4 (not an official CPE) Dovecot Pigeonhole 0.2.5 (not an official CPE) Dovecot Pigeonhole 0.3.0 (not an official CPE) Dovecot Pigeonhole 0.3.1 (not an official CPE) Dovecot Pigeonhole 0.3.2 (not an official CPE) Dovecot Pigeonhole 0.3.3 (not an official CPE) Dovecot Pigeonhole 0.3.4 (not an official CPE) Dovecot Pigeonhole 0.3.5 (not an official CPE) Dovecot Pigeonhole 0.3.6 (not an official CPE) Dovecot Pigeonhole 0.4.0 (not an official CPE) Dovecot Pigeonhole 0.4.1 (not an official CPE) Dovecot Pigeonhole 0.4.2 (not an official CPE) Dovecot Pigeonhole 0.4.3 (not an official CPE) Dovecot Pigeonhole 0.4.4 (not an official CPE) Dovecot Pigeonhole 0.4.5 (not an official CPE) Dovecot Pigeonhole 0.4.6 (not an official CPE) Dovecot Pigeonhole 0.4.7 - (not an official CPE) Dovecot Pigeonhole 0.4.7 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.7 Rc2 (not an official CPE) Dovecot Pigeonhole 0.4.7 Rc3 (not an official CPE) Dovecot Pigeonhole 0.4.8 - (not an official CPE) Dovecot Pigeonhole 0.4.8 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.8 Rc2 (not an official CPE) Dovecot Pigeonhole 0.4.8 Rc3 (not an official CPE) Dovecot Pigeonhole 0.4.9 - (not an official CPE) Dovecot Pigeonhole 0.4.9 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.10 - (not an official CPE) Dovecot Pigeonhole 0.4.10 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.10 Rc2 (not an official CPE) Dovecot Pigeonhole 0.4.11 - (not an official CPE) Dovecot Pigeonhole 0.4.11 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.11.1 (not an official CPE) Dovecot Pigeonhole 0.4.12 - (not an official CPE) Dovecot Pigeonhole 0.4.12 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.13 - (not an official CPE) Dovecot Pigeonhole 0.4.13 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.14 (not an official CPE) Dovecot Pigeonhole 0.4.15 - (not an official CPE) Dovecot Pigeonhole 0.4.15 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.16 - (not an official CPE) Dovecot Pigeonhole 0.4.16 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.17 - (not an official CPE) Dovecot Pigeonhole 0.4.17 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.18 - (not an official CPE) Dovecot Pigeonhole 0.4.18 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.19 - (not an official CPE) Dovecot Pigeonhole 0.4.19 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.20 - (not an official CPE) Dovecot Pigeonhole 0.4.20 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.21 - (not an official CPE) Dovecot Pigeonhole 0.4.21 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.22 (not an official CPE) Dovecot Pigeonhole 0.4.23 (not an official CPE) Dovecot Pigeonhole 0.4.24 - (not an official CPE) Dovecot Pigeonhole 0.4.24 Rc1 (not an official CPE) Dovecot Pigeonhole 0.4.24.1 (not an official CPE) Dovecot Pigeonhole 0.4.24.2 (not an official CPE) Dovecot Pigeonhole 0.5.0 - (not an official CPE) Dovecot Pigeonhole 0.5.0 Rc1 (not an official CPE) Dovecot Pigeonhole 0.5.0.1 (not an official CPE) Dovecot Pigeonhole 0.5.1 (not an official CPE) Dovecot Pigeonhole 0.5.2 - (not an official CPE) Dovecot Pigeonhole 0.5.2 Rc1 (not an official CPE) Dovecot Pigeonhole 0.5.3 - (not an official CPE) Dovecot Pigeonhole 0.5.3 Rc1 (not an official CPE) Dovecot Pigeonhole 0.5.4 (not an official CPE) Dovecot Pigeonhole 0.5.5 (not an official CPE) Dovecot Pigeonhole 0.5.6 (not an official CPE) Dovecot Pigeonhole 0.5.7 (not an official CPE) Dovecot Pigeonhole 0.5.7.1 (not an official CPE)