Security Advisory

CVE-2020-7957

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-12 16:50:56
Last updated 2024-08-04 09:48:24
Assigner mitre
CVSS score 3.1
State PUBLISHED

Description

The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.