CVEs-PoC/2020/CVE-2020-10957.md

CVE-2020-10957

Description

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

POC

Reference

• http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html
• https://hackerone.com/reports/827729

Github

• https://github.com/ARPSyndicate/cve-scores