Dovecot: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.5
  CVE-2021-29157

  Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authe…

  dovecot dovecot dovecot Debian Azure Linux Alpine
  Jun 28, 2021
• Medium 4.3
  CVE-2020-28200

  The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with…

  dovecot dovecot dovecot Debian Ubuntu Azure Linux
  Jun 28, 2021
• Unscored —
  CVE-2021-33515

  The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information ca…

  dovecot dovecot dovecot dovecot Debian Ubuntu Azure Linux Alpine
  Jun 28, 2021

Revision history

1. 2025-02-02 #7

   Neue Updates von openSUSE aufgenommen

2. 2022-09-26 #6

   Neue Updates von Debian aufgenommen

3. 2022-05-10 #5

   Neue Updates von Red Hat aufgenommen

4. 2021-08-31 #4

   Neue Updates von SUSE aufgenommen

5. 2021-07-18 #3

   Neue Updates von Gentoo aufgenommen

6. 2021-06-27 #2

   Referenz(en) aufgenommen: FEDORA-2021-208340A217, FEDORA-2021-891C1AB1AC

7. 2021-06-21 #1

   Initiale Fassung

References

• Dovecot Security Advisory vom 2021-06-21
  https://dovecot.org/pipermail/dovecot-news/2021-June/000457.html
• Dovecot Security Advisory vom 2021-06-21
  https://dovecot.org/pipermail/dovecot-news/2021-June/000459.html
• Dovecot Security Advisory vom 2021-06-21
  https://dovecot.org/pipermail/dovecot-news/2021-June/000460.html
• Dovecot Security Advisory vom 2021-06-21
  https://dovecot.org/pipermail/dovecot-news/2021-June/000461.html
• Dovecot Security Advisory vom 2021-06-21
  https://dovecot.org/pipermail/dovecot-news/2021-June/000462.html
• Ubuntu Security Advisory USN-4993-1 vom 2021-06-21
  https://ubuntu.com/security/notices/USN-4993-1
• Gentoo Linux Security Advisory GLSA-202107-41 vom 2021-07-18
  https://security.gentoo.org/glsa/202107-41
• SUSE Security Update SUSE-SU-2021:2891-1 vom 2021-09-01
  https://lists.suse.com/pipermail/sle-security-updates/2021-August/009375.html
• SUSE Security Update SUSE-SU-2021:2890-1 vom 2021-09-01
  https://lists.suse.com/pipermail/sle-security-updates/2021-August/009373.html
• SUSE Security Update SUSE-SU-2021:2892-1 vom 2021-09-01
  https://lists.suse.com/pipermail/sle-security-updates/2021-August/009374.html
• Red Hat Security Advisory RHSA-2022:1950 vom 2022-05-10
  https://access.redhat.com/errata/RHSA-2022:1950
• Debian Security Advisory DLA-3122 vom 2022-09-27
  https://lists.debian.org/debian-lts-announce/2022/09/msg00032.html
• openSUSE Security Update OPENSUSE-SU-2025:14715-1 vom 2025-01-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KZSDCZ5LA6IHY7KXVSL6ULAJVP6OFT2M/