vulnerability
FreeBSD: VID-a64aa22f-61ec-11e9-85b9-a4badb296695 (CVE-2019-10691): dovecot -- json encoder crash
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:N/A:P) | Apr 18, 2019 | Apr 19, 2019 | Jun 15, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 18, 2019
Added
Apr 19, 2019
Modified
Jun 15, 2026
Description
The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.
Solutions
freebsd-upgrade-package-dovecotfreebsd-upgrade-package-dovecot2
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.