VDB

DEBIAN-CVE-2020-10967

DEBIAN-CVE-2020-10967 PUBLISHED CVSS 5.300000190734863 MEDIUM

In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Debian:14dovecot0
Debian:13dovecot0
Debian:12dovecot0

Timeline

  • May 18, 2020 CVE Published
  • Oct 26, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›