<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>CVE Daily – Pigeonhole</title>
  <link>https://cvedaily.com/pages/tags/pigeonhole.html</link>
  <atom:link href="https://cvedaily.com/feed-tags/pigeonhole.xml" rel="self" type="application/rss+xml"/>
  <description>CVE Daily – Pigeonhole</description>
  <language>en</language>
  <lastBuildDate>Wed, 03 Jun 2026 21:27:12 +0000</lastBuildDate>
  <item>
    <title>[Critical] CVE-2019-11500 – In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2019-11500</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2019-11500</guid>
    <pubDate>Thu, 29 Aug 2019 14:15:11 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk critical">Critical</span> CVE-2019-11500</strong></p>
  <p>In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.</p>
  <p><strong>CVSS:</strong> 9.8 · <strong>CWE:</strong> CWE-787</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2019-11500">View on NVD</a></p>
]]>
    </description>
  </item>
</channel>
</rss>
