CVE-2019-11499 REJECTED

In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message.

EPSS 1.38% · 80.2th percentile

Risk Scores

EPSS Score
1.38%
80.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSdovecot0, 1:2.2.27-3ubuntu1, 1:2.2.33.2-1ubuntu1
Ubuntu:16.04:LTSdovecot1:2.2.22-1ubuntu2.6, 1:2.2.22-1ubuntu2.7, 0

Timeline

References

Open in Interactive Console →