In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service
    by attempting to authenticate with an invalid UTF-8 sequence as the username. (CVE-2019-10691)

  - In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client
    disconnects prematurely during the AUTH command. (CVE-2019-11494)

  - In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN
    is attempted over a TLS secured channel with an unacceptable authentication message. (CVE-2019-11499)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client
    disconnects prematurely during the AUTH command. (CVE-2019-11494)

  - In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN
    is attempted over a TLS secured channel with an unacceptable authentication message. (CVE-2019-11499)

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2,     the submission-login service crashes when the client     disconnects prematurely during the AUTH     command.(CVE-2019-11494)

  - In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2,     the submission-login component crashes if AUTH PLAIN is     attempted over a TLS secured channel with an     unacceptable authentication message.(CVE-2019-11499)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for dovecot23 fixes the following issues :

  - CVE-2019-11500: Fixed the NUL byte handling in IMAP and     ManageSieve protocol parsers. (bsc#1145559)

  - CVE-2019-11499: Fixed a vulnerability where the     submission-login would crash over a TLS secured channel     (bsc#1133625).

  - CVE-2019-11494: Fixed a denial of service if the     authentication is aborted by disconnecting     (bsc#1133624).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for dovecot23 fixes the following issue :

  - CVE-2019-11500: Fixed the NUL byte handling in IMAP and     ManageSieve protocol parsers. (bsc#1145559)

  - CVE-2019-11499: Fixed a vulnerability where the     submission-login would crash over a TLS secured channel     (bsc#1133625).

  - CVE-2019-11494: Fixed a denial of service if the     authentication is aborted by disconnecting     (bsc#1133624).

This update was imported from the SUSE:SLE-15:Update update project.

This update for dovecot23 fixes the following issues :

CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. (bsc#1145559)

CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured channel (bsc#1133625).

CVE-2019-11494: Fixed a denial of service if the authentication is aborted by disconnecting (bsc#1133624).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

dovecot updated to 2.3.6, includes several security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the Dovecot Submission login service incorrectly handled certain operations. A remote attacker could possibly use this issue to cause Dovecot to crash, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Aki Tuomi reports :

Submission-login crashes with signal 11 due to NULL pointer access when authentication is aborted by disconnecting. This can lead to denial-of-service attack by persistent attacker(s).

Aki Tuomi reports :

Submission-login crashes when authentication is started over TLS secured channel and invalid authentication message is sent. This can lead to denial-of-service attack by persistent attacker(s).

ID	Name	Product	Family	Severity
423837	Alpine: multiple dovecot packages: security update to 2.3.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
423837	Alpine: multiple dovecot packages: security update to 2.3.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400591	Alpine: multiple dovecot packages: security update to 2.3.5.1-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400591	Alpine: multiple dovecot packages: security update to 2.3.5.1-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
133980	EulerOS 2.0 SP8 : dovecot (EulerOS-SA-2020-1146)	Nessus	Huawei Local Security Checks	high
129709	openSUSE Security Update : dovecot23 (openSUSE-2019-2281)	Nessus	SuSE Local Security Checks	critical
129706	openSUSE Security Update : dovecot23 (openSUSE-2019-2278)	Nessus	SuSE Local Security Checks	critical
129554	SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2019:2514-1)	Nessus	SuSE Local Security Checks	critical
125910	Fedora 30 : 1:dovecot (2019-9e004decea)	Nessus	Fedora Local Security Checks	high
124457	Ubuntu 18.10 / 19.04 : Dovecot vulnerabilities (USN-3961-1)	Nessus	Ubuntu Local Security Checks	high
124429	FreeBSD : Dovecot -- Multiple vulnerabilities (3f98ccb3-6b8a-11e9-9b5c-a4badb296695)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2019-11494

high

Tenable Plugins

high

high

high

high

high

critical

critical

critical

high

high

high