Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Buffer overflow in Uni in smtp_command_parse_parameters
published 6 years ago
Summary
A bug in Uni's email handling code can cause the program to crash when processing certain email commands. This is a security risk because it can lead to a denial-of-service attack, where the program freezes or crashes. Update Uni to the latest version to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | dovecot | All versions |
Original advisory text
Heap-buffer-overflow in uni_utf8_get_char_n
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23513
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
uni_utf8_get_char_n
smtp_command_parse_parameters
smtp_command_parse_line
```
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
uni_utf8_get_char_n
smtp_command_parse_parameters
smtp_command_parse_line
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23513 Third Party Advisory
Timeline
Published14 Jul 2020
Updated6 Mar 2026
First seen6 Mar 2026
Track software like this
Free during beta