Debian/dovecot: critical 9.8
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead t
Action: Upgrade dovecot to 1:2.3.7.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.3.7.2-1 | - |
Fixed versions
| 1:2.3.7.2-1 |
Sources
- osv: DEBIAN-CVE-2019-11500#Debian:14/dovecot
- https://security-tracker.debian.org/tracker/CVE-2019-11500
published · modified · JSON