Rapid7 Vulnerability & Exploit Database

FreeBSD: VID-ABAAECDA-EA16-43E2-BAD0-D34A9AC576B1 (CVE-2019-11500): Dovecot -- improper input validation

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

FreeBSD: VID-ABAAECDA-EA16-43E2-BAD0-D34A9AC576B1 (CVE-2019-11500): Dovecot -- improper input validation

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
04/13/2019
Created
08/30/2019
Added
08/29/2019
Modified
09/17/2019

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.

From VID-ABAAECDA-EA16-43E2-BAD0-D34A9AC576B1:

Aki Tuomi reports:

Vulnerability Details:

IMAP and ManageSieve protocol parsers do not properly handle NUL byte

when scanning data in quoted strings, leading to out of bounds heap

memory writes.

Risk:

This vulnerability allows for out-of-bounds writes to objects stored on

the heap up to 8096 bytes in pre-login phase, and 65536 bytes post-login

phase, allowing sufficiently skilled attacker to perform complicated

attacks that can lead to leaking private information or remote code

execution. Abuse of this bug is very difficult to observe, as it does

not necessarily cause a crash. Attempts to abuse this bug are not

directly evident from logs.

Solution(s)

  • freebsd-upgrade-package-dovecot
  • freebsd-upgrade-package-dovecot-pigeonhole

References

  • CVE-2019-11500
  • USN-4110-1
  • USN-4110-2
  • USN-4110-3
  • USN-4110-4

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;