CVEs-PoC/2020/CVE-2020-10958.md

CVE-2020-10958

Description

In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.

POC

Reference

• http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html
• https://hackerone.com/reports/827051

Github

No PoCs found on GitHub currently.