[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEtmu5oHMQ7FXoQb0nbaATA0sToMuwEkOf4rsxKHMizQ":3,"g5a-risk:CVE-2019-11500":193},{"success":4,"data":5,"meta":191},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":60,"references":61,"referencesCount":113,"weaknesses":114,"weaknessesCount":123,"isActivelyExploited":124,"cisaInfo":15,"otxData":15,"relatedBlogPosts":125,"seoMetadata":126,"configurations":151,"relatedVendorCves":175,"notableEvents":176},"CVE-2019-11500","What is CVE-2019-11500?","In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.","In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\\0...","2019-08-29T14:15:11.037","2023-11-07T03:03:02.563",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.62324,[39,39,39,39,39,39,39],"Critical",[43,47,50,55],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"dovecot","*","cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*",{"vendor":44,"product":48,"version":45,"criteria":49,"vulnerable":4},"pigeonhole","cpe:2.3:a:dovecot:pigeonhole:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"fedoraproject","fedora","30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",4,[62,66,69,76,80,83,86,92,96,100,103,106,110],{"url":63,"source":64,"tags":65},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-10\u002Fmsg00024.html","Opensuse",[],{"url":67,"source":64,"tags":68},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-10\u002Fmsg00026.html",[],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F08\u002F28\u002F3","Openwall",[73,74,75],"Exploit","Mailing List","Third Party Advisory",{"url":77,"source":78,"tags":79},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2822","Red Hat",[],{"url":81,"source":78,"tags":82},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2836",[],{"url":84,"source":78,"tags":85},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2885",[],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fdovecot.org\u002Fpipermail\u002Fdovecot-news\u002F2019-August\u002F000417.html","Dovecot",[90,91],"Patch","Vendor Advisory",{"url":93,"source":94,"tags":95},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F08\u002Fmsg00035.html","Debian",[74,75],{"url":97,"source":98,"tags":99},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F3GYTZLLDNIFWT7D7JSB25ERJNMOR4CQ3\u002F","Fedoraproject",[],{"url":101,"source":98,"tags":102},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FKVHY3MU2OK2EWZJFGNDSAOMD42L7DFPX\u002F",[],{"url":104,"source":98,"tags":105},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYSJVVVRAE3SITC2ZLGCPMFDN3WVYZBWF\u002F",[],{"url":107,"source":108,"tags":109},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201908-29","Gentoo",[75],{"url":111,"source":88,"tags":112},"https:\u002F\u002Fwww.dovecot.org\u002Fsecurity.html",[91],13,[115],{"id":116,"name":117,"description":118,"extendedDescription":119,"status":120,"abstraction":121,"structure":122},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":127,"metaDescription":128,"keywords":129,"canonicalUrl":130,"structuredData":131},"What is CVE-2019-11500? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-11500, a critical severity cyber security vulnerability from 2019. High exploit probability (62.3%). In Dovecot before 2.2...","CVE-2019-11500, CVE-2019-11500 vulnerability, CVE-2019-11500 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, dovecot security, debian security, fedoraproject security, dovecot vulnerability, pigeonhole vulnerability, debian_linux vulnerability, fedora vulnerability, high risk vulnerability","\u002Fwhat-is\u002Fcve-2019-11500",{"@context":132,"@type":133,"headline":127,"description":128,"datePublished":10,"dateModified":11,"author":134,"publisher":138,"about":142,"mainEntityOfPage":146,"articleSection":149,"keywords":150},"https:\u002F\u002Fschema.org","TechArticle",{"@type":135,"name":136,"url":137},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":135,"name":136,"url":137,"logo":139},{"@type":140,"url":141},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":143,"name":6,"description":144,"additionalType":145},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":147,"@id":148},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-11500","Cybersecurity","CVE-2019-11500, CVE-2019-11500 vulnerability, CVE-2019-11500 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[152,167],{"Operator":15,"Negate":15,"Nodes":153},[154],{"Operator":155,"Negate":15,"CPEMatch":156},"OR",[157,160,164],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":159,"VersionEndIncluding":15},"88D5E505-A17F-45AE-8E1D-DA0F8E5AB532","2.2.36.4",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":162,"VersionEndExcluding":163,"VersionEndIncluding":15},"8EDA13EB-417C-4DA7-A7F8-719D3B13F8F8","2.3.0","2.3.7.2",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":166,"VersionEndIncluding":15},"62A7D824-F6F2-4988-9FBA-3859B376AEB8","0.5.7.2",{"Operator":15,"Negate":15,"Nodes":168},[169],{"Operator":155,"Negate":15,"CPEMatch":170},[171,173],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":172,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",[],[177,184],{"id":178,"eventType":179,"eventTime":180,"details":181,"label":182,"color":183},"eb627c03-9965-447e-a7f0-d342c8e792de","LOW_EPSS_DELTA","2025-07-31T04:09:16.393775+00:00","Daily EPSS score decreased by 0.134 on 2023-12-30","EPSS Score Decreased","green",{"id":185,"eventType":186,"eventTime":187,"details":188,"label":189,"color":190},"ef65168b-2bd0-47ea-bfd0-7fb715e58db8","HIGH_EPSS_DELTA","2025-10-02T08:27:09.852821+00:00","Daily EPSS score increased by 0.128 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":192,"version":33},1792439823507,{"score":194,"band":195,"action":196,"scoredAt":197},67,"Medium","Plan remediation","2026-10-19T07:01:34.945987+00:00"]