dovecot23 vulnerabilities (openSUSE)
26 vulnerabilities.
-
dovecot23openSUSE Very large headers can cause resource exhaustion when parsing message. The message-parser... 7.5 High -
dovecot23openSUSE Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU... 5.0 Medium -
dovecot23openSUSE An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two... 8.8 High -
dovecot23openSUSE Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem... 7.5 High -
dovecot23openSUSE The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp.... 4.8 Medium -
dovecot23openSUSE The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as... 4.3 Medium -
dovecot23openSUSE Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an... 7.5 High -
dovecot23openSUSE An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker... 6.8 Medium -
dovecot23openSUSE In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service... 7.5 High -
dovecot23openSUSE In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth... 7.5 High -
dovecot23openSUSE In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote... 7.5 High -
dovecot23openSUSE In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission... 5.3 Medium -
dovecot23openSUSE In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after... 5.3 Medium -
dovecot23openSUSE In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command... 7.5 High -
dovecot23openSUSE The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when... 3.1 Low -
dovecot23openSUSE lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8... 7.5 High -
dovecot23openSUSE In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email... 5.3 Medium -
dovecot23openSUSE In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol... 9.8 Critical -
dovecot23openSUSE In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if... 7.5 High -
dovecot23openSUSE In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when... 7.5 High -
dovecot23openSUSE The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the... 7.5 High -
dovecot23openSUSE In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow... 8.8 High -
dovecot23openSUSE It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client... 7.7 High -
dovecot23openSUSE A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random... 5.9 Medium -
dovecot23openSUSE A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out... 5.9 Medium -
dovecot23openSUSE A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results... 7.5 High