VDB

DEBIAN-CVE-2020-10967

DEBIAN-CVE-2020-10967 PUBLISHED CVSS 5.300000190734863 MEDIUM

In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Debian:14dovecot0, 0, 0
Debian:13dovecot0, 0, 0
Debian:12dovecot0, 0, 0
Debian:11dovecot0, 0, 0

Timeline

  • May 18, 2020 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›