Vulnerabilities (CVE)

Filtered by vendor Dovecot Subscribe
Filtered by product Pigeonhole
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-11500 3 Debian, Dovecot, Fedoraproject 4 Debian Linux, Dovecot, Pigeonhole and 1 more 2023-12-10 7.5 HIGH 9.8 CRITICAL
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.