dovecot24 vulnerabilities (openSUSE)
66 vulnerabilities.
-
dovecot24openSUSE An attacker that has valid credentials can send crafted compressed data that causes the affected... 6.5 Medium -
dovecot24openSUSE An attacker that holds a token intended for a different purpose can authenticate, because when an... 7.4 High -
dovecot24openSUSE An attacker that has valid credentials can select a compression algorithm for the IMAP connection... 6.5 Medium -
dovecot24openSUSE Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid... 3.1 Low -
dovecot24openSUSE A host listed as a trusted proxy can send forwarding information containing a NUL byte, which... 4.3 Medium -
dovecot24openSUSE The comparison used for the doveadm password and API key is not fully timing safe and can reveal... 3.1 Low -
dovecot24openSUSE An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes... 4.3 Medium -
dovecot24openSUSE An unauthenticated attacker can send an IMAP ID command with a very large number of parameters... 7.5 High -
dovecot24openSUSE Forwarding information received from a host listed as a trusted proxy is not kept separate from... 4.3 Medium -
dovecot24openSUSE An attacker that has valid credentials can use a Sieve script with the editheader extension to... 9.1 Critical -
dovecot24openSUSE An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate... 5.9 Medium -
dovecot24openSUSE None None None No publicly available exploits are known. 3.1 Low -
dovecot24openSUSE When IMAP compression is enabled, the same compression state is reused across responses in a... 3.7 Low -
dovecot24openSUSE An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process... 5.9 Medium -
dovecot24openSUSE None None None No publicly available exploits are known. 7.4 High -
dovecot24openSUSE An attacker that can send mail to a user can craft a message header whose values are chosen to... 6.5 Medium -
dovecot24openSUSE An attacker that has valid credentials can open many connections to the imap-hibernate service... 4.3 Medium -
dovecot24openSUSE An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD... 6.5 Medium -
dovecot24openSUSE An attacker that has valid credentials can submit a Sieve script containing an extreme numeric... 4.3 Medium -
dovecot24openSUSE An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause... 4.3 Medium -
dovecot24openSUSE Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands... 4.8 Medium -
dovecot24openSUSE An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed... 7.5 High -
dovecot24openSUSE An attacker that can get Dovecot to relay a message, for example through Sieve redirect or... 5.9 Medium -
dovecot24openSUSE When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with... 4.3 Medium -
dovecot24openSUSE An attacker that can send mail to a user can craft a message whose headers contain a very large... 7.5 High -
dovecot24openSUSE An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE... 4.3 Medium -
dovecot24openSUSE Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl... 3.1 Low -
dovecot24openSUSE Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass... 5.3 Medium -
dovecot24openSUSE Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS... 6.8 Medium -
dovecot24openSUSE When safe filter is used with variable expansion, all following pipelines on the same string are... 7.4 High -
dovecot24openSUSE If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP... 3.7 Low -
dovecot24openSUSE A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too... 5.3 Medium -
dovecot24openSUSE Attacker can send a specifically crafted message before authentication that causes managesieve to... 7.5 High -
dovecot24openSUSE Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory... 4.3 Medium -
dovecot24openSUSE Doveadm credentials are verified using direct comparison which is susceptible to timing oracle... 7.4 High -
dovecot24openSUSE Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth... 6.8 Medium -
dovecot24openSUSE Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.... 7.7 High -
dovecot24openSUSE ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be... 7.5 High -
dovecot24openSUSE Dovecot has provided a script to use for attachment to text conversion. This script unsafely... 4.3 Medium -
dovecot24openSUSE When sending invalid base64 SASL data, login process is disconnected from the auth server,... 5.3 Medium -
dovecot24openSUSE glowxq glowxq-oj ProblemCaseController.java uploadTestcaseZipUrl server-side request forgery 6.9 Medium -
dovecot24openSUSE When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key... 7.4 High -
dovecot24openSUSE Very large headers can cause resource exhaustion when parsing message. The message-parser... 7.5 High -
dovecot24openSUSE Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU... 5.0 Medium -
dovecot24openSUSE Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem... 7.5 High -
dovecot24openSUSE The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp.... 4.8 Medium -
dovecot24openSUSE The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as... 4.3 Medium -
dovecot24openSUSE An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker... 6.8 Medium -
dovecot24openSUSE In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service... 7.5 High -
dovecot24openSUSE In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth... 7.5 High - Show olderLoading…