Summary
Julian Brook discovered that Dovecot incorrectly handled multiple passdb
configuration entries. In certain configurations, a remote attacker could
possibly use this issue to escalate privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | dovecot | 1:2.2.33.2-1ubuntu4.8 |
| Ubuntu · 20.04 LTS 20.04:LTS | dovecot | 1:2.3.7.2-1ubuntu3.6 |
| Ubuntu · 22.04 LTS 22.04:LTS | dovecot | 1:2.3.16+dfsg1-3ubuntu2.1 |
Vulnerabilities 1
-
High 8.8
An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entri…
References
-
report
https://ubuntu.com/security/CVE-2022-30550