[Dovecot-news] CVE-2020-25275: MIME parsing crashes with particular messages
aki.tuomi at dovecot.fi
Mon Jan 4 14:03:16 EET 2021
Open-Xchange Security Advisory 2021-01-04
Vendor: OX Software GmbH
Internal reference: DOV-4113 (Bug ID)
Vulnerability type: CWE-20: Improper Input Validation
Vulnerable version: 2.3.11-18.104.22.168
Vulnerable component: lda, lmtp, imap
Report confidence: Confirmed
Solution status: Fixed by Vendor
Fixed version: 2.3.13
Vendor notification: 2020-09-10
Solution date: 2020-09-14
Public disclosure: 2021-01-04
CVE reference: CVE-2020-25275
CVSS: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Researcher credit: Innokentii Sennovskiy (Rumata888) from BI.ZONE
Mail delivery / parsing crashed when the 10 000th MIME part was
message/rfc822 (or if parent was multipart/digest). This happened
due to earlier MIME parsing changes for CVE-2020-12100.
Malicious sender can crash dovecot repeatedly by sending / uploading
message with more than 10 000 MIME parts.
These are usually dropped by MTA, where the mitigation can also be applied.
Operators should update to 2.3.13 or later version.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 488 bytes
Desc: OpenPGP digital signature
More information about the Dovecot-news