Infinite loop in Dovecot - CVE-2020-12100

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU45671

Infinite loop in Dovecot - CVE-2020-12100

Published: August 13, 2020


Vulnerability identifier: #VU45671
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-12100
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop in submission, lmtp, and lda when processing e-mail message with deeply nested MIME parts. A remote attacker can send a specially crafted email to consume all available system resources and cause denial of service conditions.


Affected software

Dovecot
Gentoo Linux
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for IBM z Systems
CentOS
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Ubuntu
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Server Applications
openEuler
Fedora
dovecot (Alpine package)
dovecot (Debian package)
dovecot-core (Ubuntu package)
dovecot (Red Hat package)
dovecot-devel
dovecot-debugsource
dovecot-debuginfo
dovecot
dovecot-help
dovecot23-fts-solr
dovecot23
dovecot23-backend-mysql
dovecot23-backend-mysql-debuginfo
dovecot23-backend-pgsql
dovecot23-backend-pgsql-debuginfo
dovecot23-backend-sqlite
dovecot23-backend-sqlite-debuginfo
dovecot23-debuginfo
dovecot23-debugsource
dovecot23-devel
dovecot23-fts
dovecot23-fts-debuginfo
dovecot23-fts-lucene
dovecot23-fts-lucene-debuginfo
dovecot23-fts-solr-debuginfo
dovecot23-fts-squat
dovecot23-fts-squat-debuginfo

How to mitigate CVE-2020-12100

Install updates from vendor's website.

Dovecot - update to 2.3.11.3
dovecot (Debian package) - addressed in versions 2.3.4.1-5+deb10u3, 2.3.4.1-5+deb10u5
dovecot (Alpine package) - update to 0.21-1
dovecot-core (Ubuntu package) - addressed in versions 1:2.2.9-1ubuntu2.6+esm3, 1:2.2.22-1ubuntu2.13, 1:2.2.33.2-1ubuntu4.6, 1:2.3.7.2-1ubuntu3.2
dovecot (Red Hat package) - addressed in versions 2.2.36-5.el8_0.3, 2.2.36-6.el7_8.1, 2.2.36-10.el8_1.2, 2.3.8-2.el8_2.2
dovecot-devel - update to 2.3.10.1-3
dovecot-debugsource - update to 2.3.10.1-3
dovecot-debuginfo - update to 2.3.10.1-3
dovecot - update to 2.3.10.1-3
dovecot-help - update to 2.3.10.1-3
dovecot - addressed in versions 2.3.11.3-4.fc31, 2.3.11.3-5.fc32, 2.3.11.3-5.fc33
dovecot23-fts-solr - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23 - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-backend-mysql - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-backend-mysql-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-backend-pgsql - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-backend-pgsql-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-backend-sqlite - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-backend-sqlite-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-debugsource - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-devel - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-fts - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-fts-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-fts-lucene - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-fts-lucene-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-fts-solr-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-fts-squat - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3
dovecot23-fts-squat-debuginfo - addressed in versions 2.3.15-4.38.3, 2.3.15-27.3, 2.3.15-58.3

External References

Related Security Bulletins