EPSS
Percentile
83.0%
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message.
bugzilla.redhat.com/show_bug.cgi?id=1709240
nvd.nist.gov/vuln/detail/CVE-2019-11499
www.cve.org/CVERecord?id=CVE-2019-11499