CVE-2020-10957

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login…

High · published May 18, 2020

CVSS v3.0
7.5
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.07167 · 94.3th percentile
Published
2020-05-18T13:56Z
EPSS history
Timeline
  • 18 MAY 13:56Z
    In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login…
    cvelistv5