Description
Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://dovecot.org/security ↗
- http://www.openwall.com/lists/oss-security/2021/01/04/3 ↗
- https://dovecot.org/pipermail/dovecot-news/2021-January/000451.html ↗
- https://www.debian.org/security/2021/dsa-4825 ↗
- http://seclists.org/fulldisclosure/2021/Jan/18 ↗
- http://packetstormsecurity.com/files/160841/Dovecot-2.3.11.3-Denial-Of-Service.html ↗
- https://security.gentoo.org/glsa/202101-01 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXDKFLOCUP7I4ELGQ2F4P5TGC6NXMYV7/ ↗