CVE-2019-7524

CVE-2019-7524 describes a buffer overflow vulnerability in Dovecot versions prior to 2.2.36.3 and 2.3.5.1, specifically affecting the indexer-worker process due to missing checks in the fts and pop3-uidl components. This flaw allows a local attacker to achieve root privilege escalation. With a CVSS score of 7.8 (High), the vulnerability has a low attack complexity and requires local privileges, but can lead to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.