CVE-2013-2111
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of...
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.
Exploit likelihood
What each source reports
NVD Score used
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.
- Record
CVE-2013-2111- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.
- Record
CVE-2013-2111- Updated
- 2026-11-02
EUVDEUVD-2013-2081No score
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.
- Record
EUVD-2013-2081- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q87m-7r55-pj97No score
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of...
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.
- Record
GHSA-q87m-7r55-pj97- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2111No score
The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.
- Record
UBUNTU-CVE-2013-2111- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2111 is a medium vulnerability (CVSS 5.0) in Dovecot, published May 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.43%, the 84th percentile. No source names a fixed version.
References
secunia.com/advisories/53492
securitytracker.com/id/1028585
openwall.com/lists/oss-security/2013/05/24/1
dovecot.org/list/dovecot-news/2013-May/000255.html
nvd.nist.gov/vuln/detail/CVE-2013-2111
github.com/advisories/GHSA-q87m-7r55-pj97
ubuntu.com/security/CVE-2013-2111
cve.org/CVERecord?id=CVE-2013-2111