FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

dovecot -- null pointer deref in notify with empty headers

Affected packages
2.3.9 <= dovecot < 2.3.9.2

Details

VuXML ID b7dc4dde-2e48-43f9-967a-c68461537cf2
Discovery 2019-12-10
Entry 2019-12-13

Aki Tuomi reports

Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers.

References

CVE Name CVE-2019-19722
URL https://dovecot.org/pipermail/dovecot/2019-December/117894.html