VDB
ALPINE-CVE-2020-10967
ALPINE-CVE-2020-10967
PUBLISHED
CVSS 5.300000190734863 MEDIUM
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
Risk Scores
CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.21 | dovecot | 2.1.7-r0, 2.2.15-r1, 2.2.15-r2 |
| Alpine:v3.15 | dovecot | 1.1.15-r0, 2.1.9-r0, 2.1.8-r0 |
| Alpine:v3.22 | dovecot | 2.2.11-r0, 2.2.2-r0, 0 |
| Alpine:v3.16 | dovecot | 0, 1.1.11-r0, 1.1.14-r1 |
| Alpine:v3.9 | dovecot | 0, 2.3.7.2-r1, 2.3.7.2-r0 |
| Alpine:v3.17 | dovecot | 2.3.9.3-r0, 0, 1.1.11-r0 |
| Alpine:v3.12 | dovecot | 2.1.6-r0, 1.1.11-r1, 1.1.13-r0 |
| Alpine:v3.23 | dovecot | 2.1.14-r0, 2.3.9.3-r0, 2.3.9.2-r0 |
| Alpine:v3.11 | dovecot | 2.1.14-r0, 2.2.15-r1, 2.2.15-r0 |
| Alpine:v3.10 | dovecot | 2.3.7.2-r0, 2.3.7.1-r0, 2.3.6-r1 |
| Alpine:v3.13 | dovecot | 2.2.13-r0, 0, 1.1.11-r0 |
| Alpine:v3.19 | dovecot | 1.1.11-r0, 2.3.9.3-r0, 2.3.9.2-r0 |
| Alpine:v3.18 | dovecot | 2.1.1-r0, 2.1.10-r0, 2.1.10-r1 |
| Alpine:v3.20 | dovecot | 2.2.5-r1, 2.2.5-r2, 2.2.6-r0 |
| Alpine:v3.14 | dovecot | 1.2.5-r0, 2.1.1-r0, 2.1.10-r0 |
| Alpine:v3.8 | dovecot | 2.1.7-r0, 2.1.8-r0, 2.1.9-r0 |
Timeline
- May 18, 2020 CVE Published
- Dec 3, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch