CVE-2019-10691 REJECTED

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

EPSS 1.62% · 81.7th percentile

Risk Scores

EPSS Score
1.62%
81.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSdovecot1:2.2.22-1ubuntu2.4, 1:2.2.22-1ubuntu2.3, 1:2.2.22-1ubuntu2.2
Ubuntu:18.04:LTSdovecot0, 1:2.2.27-3ubuntu1, 1:2.2.33.2-1ubuntu1
Ubuntu:14.04:LTSdovecot1:2.2.9-1ubuntu2.5, 1:2.2.9-1ubuntu2.4, 1:2.2.9-1ubuntu2.3

Timeline

References

Open in Interactive Console →