CVE-2020-7957

Description

The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.

Weakness classification

• nvd@nist.gov: CWE-20

Primary references

• cve@mitre.org — Exploit, Mailing List, Third Party Advisory
• cve@mitre.org — Exploit, Mailing List, Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108