Vulnetix
Try Vulnetix Request Demo
CVE-2020-10958 PUBLISHED

In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.

EPSS 1.50% · 81.0th percentile

Risk Scores

EPSS Score
1.50%
81.0th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSdovecot0, 1:2.3.4.1-5ubuntu3, 1:2.3.7.2-1ubuntu1

Timeline

References

Open in Interactive Console →