CVE-2019-10691

2019-04-2417:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.1%

JSON

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

CPENameOperatorVersion
coreeq2.2.1
coreeq2.1.rc2
dovecoteq2.3.5.1-r3
dovecoteq1.2.6-r0
dovecoteq2.2.19-r0
coreeq2.2.7
dovecoteq2.0.10-r0
dovecoteq2.2.33.2-r1
dovecoteq2.2.33.2-r2
coreeq1.1.alpha5

Name	Operator	Version
core	eq	2.2.1
core	eq	2.1.rc2
dovecot	eq	2.3.5.1-r3
dovecot	eq	1.2.6-r0
dovecot	eq	2.2.19-r0
core	eq	2.2.7
dovecot	eq	2.0.10-r0
dovecot	eq	2.2.33.2-r1
dovecot	eq	2.2.33.2-r2
core	eq	1.1.alpha5