CVE-2020-7046
lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the…
High · published February 12, 2020
Patch now
High probability of exploitation
CVSS calls it high at 7.5. It sits in the 98.9th percentile for exploit probability.
What it is
lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.
The record
Technical detail
- CVSS v3.0
- 7.5 · HIGH
- Vector
- CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.51264 · 98.9th percentile
- Published
- 2020-02-12T16:40Z
EPSS history
Timeline