FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

dovecot -- null pointer deref in notify with empty headers

Affected packages
2.3.9	<=	dovecot	<	2.3.9.2

Details

VuXML ID	b7dc4dde-2e48-43f9-967a-c68461537cf2
Discovery	2019-12-10
Entry	2019-12-13

Aki Tuomi reports

Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers.

[source]

References

CVE Name	CVE-2019-19722
URL	https://dovecot.org/pipermail/dovecot/2019-December/117894.html