Sploitus

CVE-2020-10967

2 known exploits for CVE-2020-10967

In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.

Affected products
Alt Linux, Almalinux, Centos, Dovecot, Linuxmint, Red Hat, Suse, Ubuntu
Dovecot
< 2.3.10.1
Fix
Available
CVSS 3.1
5.3 MEDIUM
EPSS
8.2% (95th percentile)
Weakness
CWE-20
NVD status
Modified
Published
2020-05-18
CVE-2020-10967 at NVD
Authoritative description, scoring and affected products

2 known exploits for CVE-2020-10967

Proof-of-concept code and exploit modules indexed by Sploitus

Open-Xchange Dovecot 2.3.10 Null Pointer Dereference / Denial Of Service
2020-05-19 Philippe AntoinePACKETSTORM
Open-Xchange Dovecot 2.3.10 Null Pointer Dereference / Denial Of Service Vulnerabilities
2020-05-18 Philippe AntoineZDT