In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "dovecot-core", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-core-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-dbg", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-dev", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-dev-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-gssapi", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-gssapi-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-imapd", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-imapd-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-ldap", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-ldap-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-lmtpd", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-lmtpd-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-managesieved", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-managesieved-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-mysql", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-mysql-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-pgsql", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-pgsql-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-pop3d", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-pop3d-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-sieve", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-sieve-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-solr", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-solr-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-sqlite", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "dovecot-sqlite-dbgsym", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" }, { "binary_name": "mail-stack-delivery", "binary_version": "1:2.2.9-1ubuntu2.6+esm2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "dovecot-core", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-core-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-dbg", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-dev", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-dev-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-gssapi", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-gssapi-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-imapd", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-imapd-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-ldap", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-ldap-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-lmtpd", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-lmtpd-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-lucene", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-lucene-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-managesieved", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-managesieved-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-mysql", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-mysql-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-pgsql", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-pgsql-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-pop3d", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-pop3d-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-sieve", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-sieve-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-solr", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-solr-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-sqlite", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "dovecot-sqlite-dbgsym", "binary_version": "1:2.2.22-1ubuntu2.12" }, { "binary_name": "mail-stack-delivery", "binary_version": "1:2.2.22-1ubuntu2.12" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "dovecot-core", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-core-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-dev", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-gssapi", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-gssapi-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-imapd", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-imapd-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-ldap", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-ldap-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-lmtpd", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-lmtpd-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-managesieved", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-managesieved-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-mysql", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-mysql-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-pgsql", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-pgsql-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-pop3d", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-pop3d-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-sieve", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-sieve-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-solr", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-solr-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-sqlite", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "dovecot-sqlite-dbgsym", "binary_version": "1:2.2.33.2-1ubuntu4.5" }, { "binary_name": "mail-stack-delivery", "binary_version": "1:2.2.33.2-1ubuntu4.5" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "dovecot-auth-lua", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-auth-lua-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-core", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-core-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-dev", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-gssapi", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-gssapi-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-imapd", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-imapd-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-ldap", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-ldap-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-lmtpd", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-lmtpd-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-lucene", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-lucene-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-managesieved", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-managesieved-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-mysql", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-mysql-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-pgsql", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-pgsql-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-pop3d", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-pop3d-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-sieve", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-sieve-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-solr", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-solr-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-sqlite", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-sqlite-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-submissiond", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "dovecot-submissiond-dbgsym", "binary_version": "1:2.3.7.2-1ubuntu3.1" }, { "binary_name": "mail-stack-delivery", "binary_version": "1:2.3.7.2-1ubuntu3.1" } ] }