| Max CVSS | 5.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-12674 | 5.0 |
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.
|
03-02-2023 - 02:23 | 12-08-2020 - 16:15 | |
| CVE-2020-12673 | 5.0 |
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.
|
03-02-2023 - 02:22 | 12-08-2020 - 16:15 | |
| CVE-2020-12100 | 5.0 |
In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.
|
29-10-2022 - 02:39 | 12-08-2020 - 16:15 | |
| CVE-2020-10967 | 5.0 |
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
|
13-10-2020 - 22:15 | 18-05-2020 - 15:15 | |
| CVE-2020-12674 | 5.0 |
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.
|
25-09-2020 - 19:15 | 12-08-2020 - 16:15 | |
| CVE-2020-12673 | 5.0 |
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.
|
25-09-2020 - 19:15 | 12-08-2020 - 16:15 | |
| CVE-2020-12100 | 5.0 |
In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.
|
25-09-2020 - 19:15 | 12-08-2020 - 16:15 | |
| CVE-2020-10967 | 5.0 |
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
|
25-09-2020 - 19:15 | 18-05-2020 - 15:15 |