There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in
    command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.
    (CVE-2020-7046)

  - The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many
    characters must be read to compute the snippet and a trailing > character exists. This causes a denial of
    service in which the recipient cannot read all of their messages. (CVE-2020-7957)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in
    command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.
    (CVE-2020-7046)

  - The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many
    characters must be read to compute the snippet and a trailing > character exists. This causes a denial of
    service in which the recipient cannot read all of their messages. (CVE-2020-7957)

  - In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a
    NULL Pointer Dereference and crash in submission-login, submission, or lmtp. (CVE-2020-10957)

  - In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in
    submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines
    after a command. (CVE-2020-10958)

  - In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by
    sending mail with an empty localpart. (CVE-2020-10967)

Aki Tuomi による報告：

lib-smtpは切り捨てられたコマンドパラメーターを適切に処理しないため、プロセスに対してCPUを100％使用する無限ループが発生します。これは、LMTP（それほど重要ではない）や、認証されていないユーザーがトリガーできるsubmission-loginでも発生します。 

Aki alsoによる報告: 

以下の場合にスニペット生成がクラッシュします: 

メッセージが十分な大きさであるため、メッセージパーサーが複数の本文ブロックを返します。最初のブロックには、「>」で終わる完全なスニペット（完全な空白など）入力は含まれません

- 2.3.9.3に更新済みのdovecot

  - CVE-2020-7046を修正します：切り捨てられたUTF-8が、DoS送信ログインとlmtpプロセスに利用される可能性があります。

  - CVE-2020-7957を修正します：特別に細工されたメールにより、スニペット生成がクラッシュする可能性があります。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Dovecot before 2.3.10.1, unauthenticated sending of     malformed parameters to a NOOP command causes a NULL     Pointer Dereference and crash in submission-login,     submission, or lmtp.(CVE-2020-10957)

  - In Dovecot before 2.3.10.1, remote unauthenticated     attackers can crash the lmtp or submission process by     sending mail with an empty localpart.(CVE-2020-10967)

  - In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message     triggers an unauthenticated use-after-free bug in     submission-login, submission, or lmtp, and can lead to     a crash under circumstances involving many newlines     after a command.(CVE-2020-10958)

  - lib-smtp in submission-login and lmtp in Dovecot 2.3.9     before 2.3.9.3 mishandles truncated UTF-8 data in     command parameters, as demonstrated by the     unauthenticated triggering of a submission-login     infinite loop.(CVE-2020-7046)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Aki Tuomi reports :

lib-smtp doesn't handle truncated command parameters properly, resulting in infinite loop taking 100% CPU for the process. This happens for LMTP (where it doesn't matter so much) and also for submission-login where unauthenticated users can trigger it. 

Aki also reports :

Snippet generation crashes if :

message is large enough that message-parser returns multiple body blocks The first block(s) don't contain the full snippet (e.g. full of whitespace) input ends with '>'

- dovecot updated to 2.3.9.3

  - fixes CVE-2020-7046: Truncated UTF-8 can be used to DoS     submission-login and lmtp processes.

  - fixes CVE-2020-7957: Specially crafted mail can crash     snippet generation.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
423842	Alpine: multiple dovecot packages: security update to 2.3.9.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
423863	Alpine: multiple dovecot packages: security update to 2.3.10.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
423842	Alpine: multiple dovecot packages: security update to 2.3.9.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
423863	Alpine: multiple dovecot packages: security update to 2.3.10.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
133661	FreeBSD: dovecot -- 複数の脆弱性（74db0d02-b140-4c32-aac6-1f1e81e1ad30）	Nessus	FreeBSD Local Security Checks	2020/2/13	2024/3/27	medium
133817	Fedora 30：1: dovecot（2020-0e6a67af5a）	Nessus	Fedora Local Security Checks	2020/2/20	2024/3/27	high
133818	Fedora 31：1: dovecot（2020-10a58fda28）	Nessus	Fedora Local Security Checks	2020/2/20	2024/3/27	high
139946	EulerOS 2.0 SP8 : dovecot (EulerOS-SA-2020-1843)	Nessus	Huawei Local Security Checks	2020/8/28	2024/2/23	high
133661	FreeBSD : dovecot -- multiple vulnerabilities (74db0d02-b140-4c32-aac6-1f1e81e1ad30)	Nessus	FreeBSD Local Security Checks	2020/2/13	2024/3/27	medium
133817	Fedora 30 : 1:dovecot (2020-0e6a67af5a)	Nessus	Fedora Local Security Checks	2020/2/20	2024/3/27	high
133818	Fedora 31 : 1:dovecot (2020-10a58fda28)	Nessus	Fedora Local Security Checks	2020/2/20	2024/3/27	high

检测

插件搜索

high

high

high

high

medium

high

high

high

medium

high

high