Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 69

Export CSV
CVE-2010-0745

Dovecot: DoS (excessive CPU use) by processing email message with huge header

Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message.

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Dovecot
Products
Dovecot
CVE-2010-3304

dovecot: INBOX ACLs to newly created mailboxes propagation, possibly leading to weak ACLs

The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs.

CVSS 2.0 · 6.4 Medium EPSS 2.7% KEV · Not listed
Vendors
Dovecot
Products
Dovecot
CVE-2010-3706

Dovecot: Failed to update ACL cache for mailboxes stored in private namespace

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving the private namespace of a user, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox.

CVSS 2.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Dovecot
Products
Dovecot
CVE-2010-3707

Dovecot: Failed to properly update ACL cache, when multiple rules defined rights for one subject

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving more specific entries that occur after less specific entries, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox.

CVSS 2.0 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Dovecot Redhat
Products
Dovecot Enterprise Linux
CVE-2021-33515

dovecot: plaintext commands injection

The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.

CVSS 3.1 · 4.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Dovecot Fedoraproject and 1 more
Products
Debian Linux Dovecot Fedora and 1 more
CVE-2021-29157

dovecot: local attacker can login as any user and access their emails

Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Dovecot Fedoraproject
Products
Dovecot Fedora
CVE-2020-7957

dovecot: specially crafted email can cause mailbox to have permanently unaccessible mail

The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.

CVSS 3.1 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Dovecot Fedoraproject
Products
Dovecot Fedora
CVE-2020-7046

dovecot: Attacker can cause submission-login and lmtp processes to be exhausted leading to DoS

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.

CVSS 3.1 · 7.5 High EPSS 51.3% KEV · Not listed
Vendors
Dovecot Fedoraproject
Products
Dovecot Fedora
CVE-2020-28200

dovecot: insufficient protection against excessive resource usage allows for a DoS

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.

CVSS 3.1 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Dovecot Fedoraproject
Products
Dovecot Fedora
CVE-2020-25275

dovecot: Denial of service via mail MIME parsing

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

CVSS 3.1 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Debian Dovecot Fedoraproject and 1 more
Products
Debian Linux Dovecot Fedora and 1 more
CVE-2020-24386

dovecot: IMAP hibernation function allows mail access

An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages (and path disclosure).

CVSS 3.1 · 6.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Debian Dovecot Fedoraproject and 1 more
Products
Debian Linux Dovecot Fedora and 1 more
CVE-2020-12673

dovecot: Out of bound reads in dovecot NTLM implementation

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.

CVSS 3.1 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Canonical Debian Dovecot and 2 more
Products
Ubuntu Linux Debian Linux Dovecot and 4 more
CVE-2020-12100

dovecot: Resource exhaustion via deeply nested MIME parts

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.

CVSS 3.1 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Canonical Debian Dovecot and 2 more
Products
Ubuntu Linux Debian Linux Dovecot and 4 more
CVE-2020-10967

dovecot: sending mail with empty quoted localpart leads to DoS

In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.

CVSS 3.1 · 5.3 Medium EPSS 8.2% KEV · Not listed
Vendors
Dovecot Redhat
Products
Dovecot Enterprise Linux
CVE-2020-10958

dovecot: command followed by sufficient number of newlines leads to use-after-free

In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.

CVSS 3.1 · 5.3 Medium EPSS 6.1% KEV · Not listed
Vendors
Dovecot Redhat
Products
Dovecot Enterprise Linux
CVE-2020-10957

dovecot: malformed NOOP commands leads to DoS

In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

CVSS 3.1 · 7.5 High EPSS 7.2% KEV · Not listed
Vendors
Dovecot Redhat
Products
Dovecot Enterprise Linux
CVE-2019-7524

dovecot: Buffer overflow in indexer-worker process results in privilege escalation

In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Dovecot and 2 more
Products
Ubuntu Linux Debian Linux Dovecot and 2 more
CVE-2019-3814

dovecot: Improper certificate validation

It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty username field could possibly use this issue to impersonate other users.

CVSS 3.0 · 7.7 High EPSS 2.4% KEV · Not listed
Vendors
Canonical Dovecot Opensuse and 1 more
Products
Ubuntu Linux Dovecot Leap and 1 more
CVE-2019-19722

dovecot: null pointer dereference in push notification driver

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient.

CVSS 3.1 · 5.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Dovecot Fedoraproject
Products
Dovecot Fedora