CVE-2011-1929
dovecot dovecot: no CVSS score yet. EPSS 3.2% chance of exploitation in the next 30 days.
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-11-01)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dovecot:dovecot
References
- http://dovecot.org/pipermail/dovecot/2011-May/059085.html
- http://dovecot.org/pipermail/dovecot/2011-May/059086.html
- http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html