Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dovecot 安全漏洞
Vulnerability Description
Dovecot是一款开源的基于类Linux/UNIX系统的IMAP和POP3邮件服务器。 Dovecot 2.3.9版本及之后版本（2.3.9.3版本已修复）中存在安全漏洞，该漏洞源于submission-login和lmtp中的lib-smtp错误的处理了截断的UTF-8数据。攻击者可利用该漏洞造成拒绝服务（无限循环）。
CVSS Information
N/A
Vulnerability Type
N/A