CVE-2020-12673

Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.3.11.3

Description The issue is related to incorrect input validation in the Dovecot mail server, which can be exploited by a remote attacker. This exploitation can lead to a disruption in the authentication service due to an out-of-bounds read caused by sending a specially formatted NTLM request.

Recommendations For versions prior to 2.3.11.3, update to version 2.3.11.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the NTLM authentication mechanism until the update is applied.