Pigeonhole
1 CVEs
product
Monthly
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Buffer Overflow
RCE
Memory Corruption
Dovecot
Pigeonhole
+2
NVD
CVSS 3.0
9.8
EPSS
62.6%
EPSS 63%
CVSS 9.8
CRITICAL
POC
PATCH
THREAT
Act Now
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Buffer Overflow
RCE
Memory Corruption
+4
NVD