CVE-2019-11500
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead…
All CVEs associated with "Pigeonhole". Page 1/1 • 1 CVEs.
A curated feed of “Pigeonhole”-related CVEs appears below. We currently track 1 CVEs for this tag (all time). In the last 365 days, 0 were published. Average CVSS is 9.8 (all time), and 100% are rated High/Critical (all time). Top CWEs (all time): CWE-787 - Out-of-bounds Write.
In our taxonomy this topic maps to a MODERATE impact class. Mail servers and webmail risk credential theft and data exposure. Patch MTA or IMAP, enforce TLS and auth, lock down admin consoles, and validate anti spam or AV. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| 2.4 | 2.4.4 | - | ||
| 0.5 | 0.5.21.1 | - | ||
| 0.4 | 0.4.24.2 | Expired | ||
| 0.3 | 0.3.6 | Expired | ||
| 0.2 | 0.2.5 | Expired | ||
| 0.1 | 0.1.4 | Expired |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS (expired) · ICS
Subscribe CVEs: RSS for “Pigeonhole” · RSS (High+Critical only)
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead…