CVE-2019-10691

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8…

published April 24, 2019

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02800 · 86.4th percentile
Published
2019-04-24T16:49Z
EPSS history
Timeline
  • 24 APR 16:49Z
    The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8…
    cvelistv5