CVE-2020-7957
The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a…
Low · published February 12, 2020
What it is
The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.
The record
Technical detail
- CVSS v3.0
- 3.1 · LOW
- Vector
- CVSS:3.0/AC:H/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:R
- CVSS v4.0
- Not supplied
- EPSS
- 0.01877 · 79.3th percentile
- Published
- 2020-02-12T16:50Z
EPSS history
Timeline