Vulnetix
Try Vulnetix Request Demo
CVE-2019-19722 REJECTED

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient.

EPSS 1.39% · 80.2th percentile

Risk Scores

EPSS Score
1.39%
80.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSdovecot0, 1:2.2.18-2ubuntu2, 1:2.2.22-1ubuntu1
Ubuntu:18.04:LTSdovecot0, 1:2.2.27-3ubuntu1, 1:2.2.33.2-1ubuntu1

Timeline

References

Open in Interactive Console →