In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled. CREATE(Triage):(User=admin) [CVE-2020-12674|https://nvd.nist.gov/vuln/detail/CVE-2020-12674]