Fedora 31: dovecot FEDORA-2020-b60344c987

May27
by Ike on May 27, 2020 at 10:59 pm
Posted In: Fedora Linux Distribution - Security Advisories

– CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn’t start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to crash the submission service without authentication. – CVE-2020-10958: lmtp/submission:

└ Tags: