dovecot vulnerabilities (Mageia)
47 vulnerabilities.
-
dovecotMageia An attacker that has valid credentials can send crafted compressed data that causes the affected... 6.5 Medium -
dovecotMageia An attacker that holds a token intended for a different purpose can authenticate, because when an... 7.4 High -
dovecotMageia An attacker that has valid credentials can select a compression algorithm for the IMAP connection... 6.5 Medium -
dovecotMageia Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid... 3.1 Low -
dovecotMageia A host listed as a trusted proxy can send forwarding information containing a NUL byte, which... 4.3 Medium -
dovecotMageia The comparison used for the doveadm password and API key is not fully timing safe and can reveal... 3.1 Low -
dovecotMageia An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes... 4.3 Medium -
dovecotMageia An unauthenticated attacker can send an IMAP ID command with a very large number of parameters... 7.5 High -
dovecotMageia Forwarding information received from a host listed as a trusted proxy is not kept separate from... 4.3 Medium -
dovecotMageia An attacker that has valid credentials can use a Sieve script with the editheader extension to... 9.1 Critical -
dovecotMageia An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate... 5.9 Medium -
dovecotMageia None None None No publicly available exploits are known. 3.1 Low -
dovecotMageia When IMAP compression is enabled, the same compression state is reused across responses in a... 3.7 Low -
dovecotMageia An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process... 5.9 Medium -
dovecotMageia None None None No publicly available exploits are known. 7.4 High -
dovecotMageia An attacker that can send mail to a user can craft a message header whose values are chosen to... 6.5 Medium -
dovecotMageia An attacker that has valid credentials can open many connections to the imap-hibernate service... 4.3 Medium -
dovecotMageia An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD... 6.5 Medium -
dovecotMageia An attacker that has valid credentials can submit a Sieve script containing an extreme numeric... 4.3 Medium -
dovecotMageia An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause... 4.3 Medium -
dovecotMageia Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands... 4.8 Medium -
dovecotMageia An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed... 7.5 High -
dovecotMageia An attacker that can get Dovecot to relay a message, for example through Sieve redirect or... 5.9 Medium -
dovecotMageia When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with... 4.3 Medium -
dovecotMageia An attacker that can send mail to a user can craft a message whose headers contain a very large... 7.5 High -
dovecotMageia Very large headers can cause resource exhaustion when parsing message. The message-parser... 7.5 High -
dovecotMageia Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU... 5.0 Medium -
dovecotMageia An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two... 8.8 High -
dovecotMageia Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem... 7.5 High -
dovecotMageia The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp.... 4.8 Medium -
dovecotMageia The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as... 4.3 Medium -
dovecotMageia Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an... 7.5 High -
dovecotMageia An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker... 6.8 Medium -
dovecotMageia In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service... 7.5 High -
dovecotMageia In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth... 7.5 High -
dovecotMageia In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote... 7.5 High -
dovecotMageia In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission... 5.3 Medium -
dovecotMageia In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after... 5.3 Medium -
dovecotMageia In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command... 7.5 High -
dovecotMageia In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol... 9.8 Critical -
dovecotMageia In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow... 8.8 High -
dovecotMageia It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client... 7.7 High -
dovecotMageia A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random... 5.9 Medium -
dovecotMageia A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out... 5.9 Medium -
dovecotMageia A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results... 7.5 High -
dovecotMageia Updated dovecot packages fix security vulnerability No score -
dovecotMageia Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not... 5.0 Medium