CVE-2020-7957

The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.

Affected products

Alt Linux, Dovecot

Dovecot

< 2.3.9.3

Fix

Available

CVSS 3.1

5.3 MEDIUM

EPSS

1.9% (78th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2020-02-12

No exploit for CVE-2020-7957 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.