PT-2020-19876 · Dovecot+1 · Dovecot+1

Published 2020-02-12 · Updated 2025-01-30 · CVE-2020-7957

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Dovecot versions 2.3.9 through 2.3.9.2

Description The issue arises from the mishandling of snippet generation by the IMAP and LMTP components when a large number of characters must be read to compute the snippet and a trailing > character exists. This results in a denial of service, preventing the recipient from reading all of their messages.

Recommendations For Dovecot versions 2.3.9 through 2.3.9.2, update to version 2.3.9.3 or later to resolve the issue.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2020-1984

CVE-2020-7957

OPENSUSE-SU-2024:10726-1

OPENSUSE-SU-2025:14715-1

Affected Products

Alt Linux

Dovecot

References · 37

• 🔥 http://openwall.com/lists/oss-security/2020/02/12/2 · Exploit
• 🔥 https://dovecot.org/pipermail/dovecot-news/2020-February/000430.html · Exploit
• https://dovecot.org/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7957 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2020-7957 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XYT55WH372BJOXCJRKBDIFGBMPVOIDT · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJXHOUT3FH2DJNMACSX4GHPP4MUV4UKA · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10726-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14715-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7957 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-10958 · Note
• https://suse.com/security/cve/CVE-2017-15132 · Note
• https://suse.com/security/cve/CVE-2020-12674 · Note
• https://suse.com/security/cve/CVE-2020-12100 · Note
• https://suse.com/security/cve/CVE-2020-24386 · Note