Every CVE Search/ Get API key

CVE-2011-1929

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not...

5.0 MediumFix available

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Exploit likelihood

3.25%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Record
CVE-2011-1929
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Record
CVE-2011-1929
Updated
2026-11-02
EUVDEUVD-2011-1927 No score

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Record
EUVD-2011-1927
Updated
2026-11-03
GitHub AdvisoriesGHSA-8hm3-4p5h-mv6g No score

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not...

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Record
GHSA-8hm3-4p5h-mv6g
Weakness
CWE-20
Updated
2026-11-02
OSV No score

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Record
CVE-2011-1929
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1929 No score

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Record
DEBIAN-CVE-2011-1929
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dovecot
Debian:12
 before 1:2.0.13-1
1:2.0.13-1
dovecot
Debian:13
 before 1:2.0.13-1
1:2.0.13-1
dovecot
Debian:14
 before 1:2.0.13-1
1:2.0.13-1
dovecot
Debian:6.0
 before 1:1.2.15-7, plus listed versions
1:1.2.15-4
1:1.2.15-7
dovecot
Red Hat:enterprise_linux:4::as
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
dovecot-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
dovecot
Red Hat:enterprise_linux:4::desktop
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
dovecot-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
dovecot
Red Hat:enterprise_linux:4::es
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
dovecot-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
Show 12 moreShow less
Affected packages
PackageAffectedFixed
dovecot
Red Hat:enterprise_linux:4::ws
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
dovecot-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:0.99.11-10.EL4
0:0.99.11-10.EL4
dovecot
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.0.7-7.el5_7.1
0:1.0.7-7.el5_7.1
dovecot-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.0.7-7.el5_7.1
0:1.0.7-7.el5_7.1
dovecot
Red Hat:enterprise_linux:5::server
 before 0:1.0.7-7.el5_7.1
0:1.0.7-7.el5_7.1
dovecot-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.0.7-7.el5_7.1
0:1.0.7-7.el5_7.1
dovecot
Red Hat:enterprise_linux:6::server
 before 1:2.0.9-2.el6_1.1
1:2.0.9-2.el6_1.1
dovecot-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:2.0.9-2.el6_1.1
1:2.0.9-2.el6_1.1
dovecot-mysql
Red Hat:enterprise_linux:6::server
 before 1:2.0.9-2.el6_1.1
1:2.0.9-2.el6_1.1
dovecot-pgsql
Red Hat:enterprise_linux:6::server
 before 1:2.0.9-2.el6_1.1
1:2.0.9-2.el6_1.1
dovecot-pigeonhole
Red Hat:enterprise_linux:6::server
 before 1:2.0.9-2.el6_1.1
1:2.0.9-2.el6_1.1
dovecot-devel
Red Hat:enterprise_linux:6::server
 before 1:2.0.9-2.el6_1.1
1:2.0.9-2.el6_1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1929 is a medium vulnerability (CVSS 5.0) in Dovecot, published May 24, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.25%, the 88th percentile. Fixed in dovecot 1:2.0.13-1.

References

Show 27 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open