CVE-2011-1929

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows…

published May 24, 2011

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03250 · 88.2th percentile
Published
2011-05-24T23:00Z
EPSS history
Timeline
  • 24 MAY 23:00Z
    lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows…
    cvelistv5