Lucene search

UbuntuUSN-4110-3

HistoryAug 28, 2019 - 12:00 a.m.

Dovecot regression

2019-08-2800:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.599

Percentile

97.8%

JSON

Releases

Ubuntu 19.04
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

dovecot - IMAP and POP3 email server

Details

USN-4110-1 fixed a vulnerability in Dovecot. The update introduced a
regression causing a wrong check. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly
handled certain data. An attacker could possibly use this issue
to cause a denial of service or execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu19.04noarchdovecot-core< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-auth-lua< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-auth-lua-dbgsym< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-core-dbgsym< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-dev< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-gssapi< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-gssapi-dbgsym< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-imapd< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-imapd-dbgsym< 1:2.3.4.1-1ubuntu2.4UNKNOWN
Ubuntu19.04noarchdovecot-ldap< 1:2.3.4.1-1ubuntu2.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	19.04	noarch	dovecot-core	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-auth-lua	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-auth-lua-dbgsym	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-core-dbgsym	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-dev	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-gssapi	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-gssapi-dbgsym	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-imapd	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-imapd-dbgsym	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN
Ubuntu	19.04	noarch	dovecot-ldap	< 1:2.3.4.1-1ubuntu2.4	UNKNOWN