CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
Percentile
10.1%
Severity: High
Date : 2019-03-28
CVE-ID : CVE-2019-7524
Package : dovecot
Type : privilege escalation
Remote : No
Link : https://security.archlinux.org/AVG-944
The package dovecot before version 2.3.5.1-1 is vulnerable to privilege
escalation.
Upgrade to 2.3.5.1-1.
The problem has been fixed upstream in version 2.3.5.1.
None.
A stack-based buffer overflow has been found in Dovecot versions prior
to 2.3.5.1. When reading FTS or POP3-UIDL header from dovecot index,
the input buffer size is not bound, and data is copied to target
structure causing stack overflow. This can be used for local root
privilege escalation or executing arbitrary code in dovecot process
context. This requires ability to directly modify dovecot indexes.
A local attacker with the ability to alter FTS or POP3-UIDL files can
escalate privileges to root.
https://seclists.org/oss-sec/2019/q1/197
https://dovecot.org/pipermail/dovecot/2019-March/115296.html
https://github.com/dovecot/core/commit/79679674eb6d2c7d38f2537e613efc103058dff1
https://github.com/dovecot/core/commit/d79845350e0754f5e25c41bd56591ddd5b0a35fd
https://security.archlinux.org/CVE-2019-7524
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
Percentile
10.1%