Test Kennung:	1.3.6.1.4.1.25623.1.0.704510
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 4510-1 (dovecot - security update)
Zusammenfassung:	The remote host is missing an update for the 'dovecot'; package(s) announced via the DSA-4510-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'dovecot' package(s) announced via the DSA-4510-1 advisory. Vulnerability Insight: Nick Roessler and Rafi Rubin discovered that the IMAP and ManageSieve protocol parsers in the Dovecot email server do not properly validate input (both pre- and post-login). A remote attacker can take advantage of this flaw to trigger out of bounds heap memory writes, leading to information leaks or potentially the execution of arbitrary code. Affected Software/OS: 'dovecot' package(s) on Debian Linux. Solution: For the oldstable distribution (stretch), this problem has been fixed in version 1:2.2.27-3+deb9u5. For the stable distribution (buster), this problem has been fixed in version 1:2.3.4.1-5+deb10u1. We recommend that you upgrade your dovecot packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11500
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.