CVE-2020-7957
dovecot: specially crafted email can cause mailbox to have permanently unaccessible mail
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 12, 2020
Updated · November 22, 2025
Description
The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-20 · Improper Input Validation