← Back to browse · API

CVE-2020-7046

Severity
HIGH
CVSS
7.5
EPSS
0.51264
Risk score
47.94
CISA KEV
No
PoC
No
Published
2020-02-12
Modified
2024-08-04
First seen
2026-08-07
Aliases
EUVD-2020-28180, GHSA-XXQF-CF9X-9RWQ
Products
n/a:n/a n/a
Sources
euvd EUVD-2020-28180

Description

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.

References