Total vulnerabilities in the database
The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.
| Software | From | Fixed in |
|---|---|---|
| dovecot / dovecot | 2.3.9 | 2.3.9.3 |
| fedoraproject / fedora | 30 | 30.x |
| fedoraproject / fedora | 31 | 31.x |