https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T02:58:17.763737+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-11500 CVE-2019-11500 2026-10-03T02:58:17.873050+00:00

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.

 https://vulnerability.circl.lu/vuln/usn-4110-1 USN-4110-1 — dovecot vulnerability 2026-10-03T02:58:17.873158+00:00

Affected: Ubuntu:16.04:LTS: dovecot, Ubuntu:18.04:LTS: dovecot

Nick Roessler and Rafi Rubin discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.