CVE-2019-11500 log
| Source |
|
| Severity | Critical |
| Remote | Yes |
| Type | Arbitrary code execution |
| Description | IMAP and ManageSieve protocol parsers in Dovecot before 2.3.7.2 and Pigeonhole before 0.5.7.2 do not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1027 | pigeonhole | 0.5.7.1-1 | 0.5.7.2-1 | Critical | Fixed | |
| AVG-1026 | dovecot | 2.3.7.1-1 | 2.3.7.2-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 28 Aug 2019 | ASA-201908-19 | AVG-1027 | pigeonhole | Critical | arbitrary code execution |
| 28 Aug 2019 | ASA-201908-18 | AVG-1026 | dovecot | Critical | arbitrary code execution |