SB2020082639 - Fedora 31 update for dovecot

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Infinite loop (CVE-ID: CVE-2020-12100)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop in submission, lmtp, and lda when processing e-mail message with deeply nested MIME parts. A remote attacker can send a specially crafted email to consume all available system resources and cause denial of service conditions.

2) Out-of-bounds read (CVE-ID: CVE-2020-12673)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when processing NTLM requests. A remote attacker can send a specially formatted NTLM reques, trigger out-of-bounds read error and crash the auth service.

3) Input validation error (CVE-ID: CVE-2020-10967)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input passed via email message. A remote attacker can send a specially crafted email with empty quoted localpart and crash the submission or lmtp service.

PoC:

Send mail with envelope sender or recipient as ``<""@example.org>``.

4) Input validation error (CVE-ID: CVE-2020-12674)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in RPA requests. A remote attacker can send a specially formatted 0-lenght RPA request and crash the auth service.

Remediation

Install update from vendor's website.

References

• https://bodhi.fedoraproject.org/updates/FEDORA-2020-cd8b8f887b