NetSight
IP …
high8.8

CVE-2019-7524

In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate t…

Impact

In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components.

Affected products

VendorProductAffected versions
DovecotDovecot
before 2.2.36.3
from 2.3.0 before 2.3.5.1
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10
OpensuseLeap
Versions 15.0, 42.3

Weakness classification

CWE-119

References