dovecot vulnerabilities (openEuler)
19 vulnerabilities.
-
dovecotopenEuler An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE... 4.3 Medium -
dovecotopenEuler Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl... 3.1 Low -
dovecotopenEuler Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass... 5.3 Medium -
dovecotopenEuler Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS... 6.8 Medium -
dovecotopenEuler A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too... 5.3 Medium -
dovecotopenEuler Attacker can send a specifically crafted message before authentication that causes managesieve to... 7.5 High -
dovecotopenEuler Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory... 4.3 Medium -
dovecotopenEuler Doveadm credentials are verified using direct comparison which is susceptible to timing oracle... 7.4 High -
dovecotopenEuler Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth... 6.8 Medium -
dovecotopenEuler When dovecot has been configured to use per-domain passwd files, and they are placed one path... 5.3 Medium -
dovecotopenEuler ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be... 7.5 High -
dovecotopenEuler Dovecot has provided a script to use for attachment to text conversion. This script unsafely... 4.3 Medium -
dovecotopenEuler Very large headers can cause resource exhaustion when parsing message. The message-parser... 7.5 High -
dovecotopenEuler Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU... 5.0 Medium -
dovecotopenEuler An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two... 8.8 High -
dovecotopenEuler The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp.... 4.8 Medium -
dovecotopenEuler The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as... 4.3 Medium -
dovecotopenEuler Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an... 7.5 High -
dovecotopenEuler An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker... 6.8 Medium