dovecot22 vulnerabilities (SUSE)
30 vulnerabilities.
-
dovecot22SUSE An attacker that has valid credentials can send crafted compressed data that causes the affected... 6.5 Medium -
dovecot22SUSE An attacker that has valid credentials can select a compression algorithm for the IMAP connection... 6.5 Medium -
dovecot22SUSE The comparison used for the doveadm password and API key is not fully timing safe and can reveal... 3.1 Low -
dovecot22SUSE An unauthenticated attacker can send an IMAP ID command with a very large number of parameters... 7.5 High -
dovecot22SUSE An attacker that has valid credentials can use a Sieve script with the editheader extension to... 9.1 Critical -
dovecot22SUSE When IMAP compression is enabled, the same compression state is reused across responses in a... 3.7 Low -
dovecot22SUSE An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process... 5.9 Medium -
dovecot22SUSE An attacker that has valid credentials can open many connections to the imap-hibernate service... 4.3 Medium -
dovecot22SUSE An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD... 6.5 Medium -
dovecot22SUSE An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause... 4.3 Medium -
dovecot22SUSE Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands... 4.8 Medium -
dovecot22SUSE An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed... 7.5 High -
dovecot22SUSE An attacker that can get Dovecot to relay a message, for example through Sieve redirect or... 5.9 Medium -
dovecot22SUSE An attacker that can send mail to a user can craft a message whose headers contain a very large... 7.5 High -
dovecot22SUSE An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE... 4.3 Medium -
dovecot22SUSE Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl... 3.1 Low -
dovecot22SUSE Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass... 5.3 Medium -
dovecot22SUSE Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS... 6.8 Medium -
dovecot22SUSE An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two... 8.8 High -
dovecot22SUSE An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker... 6.8 Medium -
dovecot22SUSE In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service... 7.5 High -
dovecot22SUSE In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth... 7.5 High -
dovecot22SUSE In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol... 9.8 Critical -
dovecot22SUSE In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow... 8.8 High -
dovecot22SUSE It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client... 7.7 High -
dovecot22SUSE A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random... 5.9 Medium -
dovecot22SUSE A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out... 5.9 Medium -
dovecot22SUSE A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results... 7.5 High -
dovecot22SUSE Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb... 3.7 Low -
dovecot22SUSE A postinstall script in the dovecot rpm allows local users to read the contents of newly created... 3.3 Low