VDB

GCVE-VVD-MAGEIA-2019-141

GCVE-VVD-MAGEIA-2019-141
Advisory Published
Vulnetix · Advisory published September 27, 2019
CVE-2019-7524: Missing input buffer size validation leads into arbitrary buffer overflow when reading fts or pop3 uidl header from Dovecot index. Exploiting this requires direct write access to the index files.

Affected Products

VendorProductVersionsPlatforms
Mageiaqscintilla0 (affected), 2.11.1-6.1.mga7 (unaffected)—
Mageiadovecot0 (affected), 2.2.36.3-1.mga6 (unaffected), 0 (affected), 2.2.36.3-1.mga6 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›