In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push
    notifications are used, because of a NULL Pointer Dereference. The email must use a group address as
    either the sender or the recipient. (CVE-2019-19722)

Security fix for CVE-2019-19722: NULL pointer dereference in push notification driver

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Aki Tuomi reports

Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers.

ID	Name	Product	Family	Severity
423840	Alpine: multiple dovecot packages: security update to 2.3.9.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
423840	Alpine: multiple dovecot packages: security update to 2.3.9.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
132780	Fedora 30 : 1:dovecot (2019-72e5ac943a)	Nessus	Fedora Local Security Checks	medium
132737	Fedora 31 : 1:dovecot (2019-5898f4f935)	Nessus	Fedora Local Security Checks	medium
132066	FreeBSD : dovecot -- NULL pointer deref in notify with empty headers (b7dc4dde-2e48-43f9-967a-c68461537cf2)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2019-19722

medium

Tenable Plugins

medium

medium

medium

medium

medium