VDB

GCVE-110-MAGEIA-2019-141

GCVE-110-MAGEIA-2019-141
Advisory Published
Vulnetix · Advisory published April 10, 2019
CVE-2019-7524: Missing input buffer size validation leads into arbitrary buffer overflow when reading fts or pop3 uidl header from Dovecot index. Exploiting this requires direct write access to the index files.

Affected Products

VendorProductVersionsPlatforms
Mageiaqscintilla2.11.1-6.1.mga7 (unaffected), 0 (affected)—
Mageiadovecot0 (affected), 2.2.36.3-1.mga6 (unaffected), 2.2.36.3-1.mga6 (unaffected), 0 (affected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›