Stack-based buffer overflow in dovecot (Alpine package)
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2019-7524 |
| CWE-ID | CWE-121 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
dovecot (Alpine package) Operating systems & Components / Operating system package or component |
| Vendor | Alpine Linux Development Team |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Stack-based buffer overflow
EUVDB-ID: #VU18089
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2019-7524
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when reading FTS or POP3-UIDL header from dovecot index. A local user can modify Dovecot index, trigger stack-based buffer overflow and execute arbitrary code on the target system with privileges of the Dovecot process.
MitigationInstall update from vendor's website.
Vulnerable software versionsdovecot (Alpine package): 2.0.15-r0 - 2.2.36.1-r1
External linkshttp://git.alpinelinux.org/aports/commit/?id=330109cbd42739e383036be3ebef566fe4bded3f
http://git.alpinelinux.org/aports/commit/?id=601d2a466efe1b4da01cec77024c25c07206b47e
http://git.alpinelinux.org/aports/commit/?id=31b384b0fc060368553c2b5da5980ff5625997b5
http://git.alpinelinux.org/aports/commit/?id=471cf80f4f70e2cd9766b70608e0894e1336c52f
http://git.alpinelinux.org/aports/commit/?id=b37a739e81ca9a8962a75c6a3675c5a20b86ae11
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
