Unscored USN-3556-1 1 CVE

dovecot vulnerability

Published Feb 1, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Dovecot incorrectly handled certain authentications.
An attacker could possibly use this to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	dovecot	1:2.2.9-1ubuntu2.3
Ubuntu · 16.04 LTS 16.04:LTS	dovecot	1:2.2.22-1ubuntu2.6

Vulnerabilities 1

Unscored —

CVE-2017-15132

A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dov…

The Dovecot Project Dovecot dovecot dovecot Debian Ubuntu Alpine

Jan 25, 2018

References

report
https://ubuntu.com/security/CVE-2017-15132