Filter
-Infinity
0

DovecotDovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be C…

First published (updated )

DovecotVulnerability Details: Very large headers can cause resource exhaustion when parsing message. The me…

First published (updated )

DovecotVulnerability Details: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes ex…

First published (updated )

DovecotAn issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb …

8.8
First published (updated )

FedoraThe Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated …

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FedoraCommand Injection

First published (updated )

FedoraPath Traversal

7.5
First published (updated )

debian/dovecotAn issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can …

First published (updated )

debian/dovecotInput Validation

7.5
First published (updated )

ubuntu/dovecotIn Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service be…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ubuntu/dovecotIn Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service b…

7.5
First published (updated )

ubuntu/dovecotIn Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attack…

7.5
First published (updated )

debian/dovecotUse After Free

First published (updated )

debian/dovecotInput Validation

First published (updated )

debian/dovecotNull Pointer Dereference

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FedoraInput Validation

First published (updated )

Fedoralib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 dat…

7.8
First published (updated )

FedoraNull Pointer Dereference

First published (updated )

DovecotIMAP and ManageSieve protocol parsers do not properly handle NUL byte when scanning data in quoted s…

First published (updated )

FedoraNull Pointer Dereference

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FedoraIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH …

7.5
First published (updated )

DovecotThe JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication s…

7.5
First published (updated )

UbuntuBuffer Overflow

8.8
First published (updated )

UbuntuLast updated 24 July 2024

7.7
First published (updated )

Ubuntu gir1.2-packagekitglib-1.0Infoleak

7.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ubuntu LinuxLast updated 24 July 2024

7.5
First published (updated )

Ubuntu LinuxLast updated 24 July 2024

First published (updated )

debian/dovecotInput Validation

7.5
First published (updated )

DovecotInput Validation

First published (updated )

DovecotKurt Seifried of Red Hat reports: The dovecot rpm creates the SSL/TLS key files using the following…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203