CVE:CVE-2019-11500
CNNVD:CNNVD-201908-2160
Dovecot是一款开源的基于类Linux/UNIX系统的IMAP和POP3邮件服务器。Pigeonhole是一款在Dovecot的基础上添加对Sieve语言和ManageSieve协议的项目。
Pigeonhole 0.5.7.2之前版本、Dovecot 2.2.36.4之前版本和2.3.7.2之前的2.3.x版本中存在缓冲区错误漏洞，该漏洞源于程序没有正确处理‘’字符。攻击者可利用该漏洞执行代码。
solution:Upgrade dovecot dovecot to a higher version than 2.2.36.4,2.3.7.2,and avoid the version (,2.2.36.4),[2.3.0,2.3.7.2); Upgrade dovecot pigeonhole to a higher version than 0.5.7.2,and avoid the version (,0.5.7.2); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30