Dovecot: >> Dovecot >> 2.3.4.1 Security Vulnerabilities
The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.
CVSS Score
7.5
EPSS Score
0.028
Published
2019-04-24
In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components.
CVSS Score
8.8
EPSS Score
0.012
Published
2019-03-28
Page 4