CVE ID:	CVE-2019-7524
Description:	In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components.
Test IDs:	1.3.6.1.4.1.25623.1.0.113378   1.3.6.1.4.1.25623.1.0.891736   1.3.6.1.4.1.25623.1.0.704418   1.3.6.1.4.1.25623.1.0.852424   1.3.6.1.4.1.25623.1.0.843950   1.3.6.1.4.1.25623.1.0.876756   1.3.6.1.4.1.25623.1.0.876727   1.3.6.1.4.1.25623.1.1.2.2019.1644   1.3.6.1.4.1.25623.1.0.877348   1.3.6.1.4.1.25623.1.1.4.2019.0876.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-7524 BugTraq ID: 107672 http://www.securityfocus.com/bid/107672 Bugtraq: 20190328 [SECURITY] [DSA 4418-1] dovecot security update (Google Search) https://seclists.org/bugtraq/2019/Mar/59 Debian Security Information: DSA-4418 (Google Search) https://www.debian.org/security/2019/dsa-4418 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHFZ5OWRIZGIWZJ5PTNVWWZNLLNH4XYS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4XLI55NGRDTGMVOPYFCPPFNPA5VKYSSY/ https://security.gentoo.org/glsa/201904-19 https://dovecot.org/list/dovecot-news/2019-March/000403.html https://dovecot.org/security.html https://lists.debian.org/debian-lts-announce/2019/03/msg00038.html http://www.openwall.com/lists/oss-security/2019/03/28/1 SuSE Security Announcement: openSUSE-SU-2019:1212 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00060.html SuSE Security Announcement: openSUSE-SU-2019:1220 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00067.html https://usn.ubuntu.com/3928-1/