CVE-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

Affected products

Alt Linux, Almalinux, Centos, Dovecot, Linuxmint, Red Hat, Suse, Ubuntu

Dovecot

< 2.3.13

CVSS 3.1

7.5 HIGH

EPSS

4.7% (91th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2021-01-04