CVE:CVE-2020-24386
CNNVD:CNNVD-202101-029
Dovecot是一款开源的基于类Linux/UNIX系统的IMAP和POP3邮件服务器。
Dovecot before 2.3.13 存在安全漏洞，攻击者可利用该漏洞控制的参数触发解除休眠，从而访问其他用户的电子邮件消息。
solution:Upgrade dovecot dovecot to a higher version than 2.3.13,and avoid the version [2.2.26,2.3.13); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32