Summary
Ein Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um Sicherheitsvorkehrungen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.
Product
Dovecot ist ein Open Source IMAP und POP3 E-Mail Server.
Vulnerabilities 28
-
Critical 9.1
An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free…
-
High 7.5
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email address…
-
High 7.5
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authent…
-
High 7.5
An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which…
-
High 7.4
None None None No publicly available exploits are known.
-
High 7.4
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response…
-
High 7.3
glowxq glowxq-oj ProblemCaseController.java uploadTestcaseZipUrl server-side request forgery
A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestcaseZipUrl of the file business/business-oj/src/main/java/com/glowxq/oj/problem/controller/ProblemCaseController.java. …
-
Medium 6.5
An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disp…
-
Medium 6.5
An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal h…
-
Medium 6.5
An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression s…
-
Medium 6.5
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its…
-
Medium 5.9
An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a …
-
Medium 5.9
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin …
-
Medium 5.9
An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more th…
-
Medium 4.8
Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator…
-
Medium 4.3
When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused …
-
Medium 4.3
An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial o…
-
Medium 4.3
An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an…
-
Medium 4.3
An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid command…
-
Medium 4.3
Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentic…
-
Medium 4.3
An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to …
-
Medium 4.3
A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process…
-
Low 3.7
When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes…
-
Low 3.1
None None None No publicly available exploits are known.
-
Low 3.1
The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the conf…
-
Low 3.1
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the acc…
-
Unscored —CVE-2023-51764 Public exploit
Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and…
-
Unscored —
Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a publ…
Revision history
-
#14
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#13
Neue Updates von Red Hat aufgenommen
-
#12
Neue Updates von Debian aufgenommen
-
#11
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#10
Neue Updates von Oracle Linux und Red Hat aufgenommen
-
#9
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#8
Neue Updates von Oracle Linux und Red Hat aufgenommen
-
#7
Neue Updates von Red Hat, Rocky Enterprise Software Foundation und Oracle Linux aufgenommen
-
#6
Neue Updates von Debian und Amazon aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von SUSE aufgenommen
-
#3
Neue Updates von openSUSE aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-67681, EUVD-2026-67680, EUVD-2026-67679, EUVD-2026-67677, EUVD-2026-67676, EUVD-2026-67675, EUVD-2026-67674, EUVD-2026-67673, EUVD-2026-67672, EUVD-2026-67671, EUVD-2026-67670, EUVD-2026-67669, EUVD-2026-67667, EUVD-2026-67665, EUVD-2026-67664, EUVD-2026-67663, EUVD-2026-67662, EUVD-2026-67661, EUVD-2026-67660, EUVD-2026-67657, EUVD-2026-67678, EUVD-2026-67668, EUVD-2026-67658
-
#1
Initiale Fassung
References
-
Dovecot and Pigeonhole v2.4.5 release vom 2026-08-27
https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/thread/D7FJQODYCY23BG3FWUZXCJRCLCPT7RZT/
-
Dovecot Security Advisory vom 2026-08-27
https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/thread/WT4USR35HN43TGQGVDXPDAMCUTGLVMET/
-
openSUSE Security Update OPENSUSE-SU-2026:11629-1 vom 2026-08-31
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N7CXA6IRDOEOD64PNK2U4NIZ2WGVCD2O/
-
SUSE Security Update SUSE-SU-2026:3919-1 vom 2026-09-10
https://lists.suse.com/pipermail/sle-security-updates/2026-September/028775.html
-
SUSE Security Update SUSE-SU-2026:4139-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029056.html
-
SUSE Security Update SUSE-SU-2026:23595-1 vom 2026-09-16
https://lists.suse.com/pipermail/sle-security-updates/2026-September/029091.html
-
Debian Security Advisory DSA-6526 vom 2026-09-28
https://security-tracker.debian.org/tracker/DSA-6526-1
-
Amazon Linux Security Advisory ALAS2-2026-3935 vom 2026-09-29
https://alas.aws.amazon.com/AL2/ALAS2-2026-3935.html
-
Red Hat Security Advisory RHSA-2026:76763 vom 2026-10-06
https://access.redhat.com/errata/RHSA-2026:76763
-
Rocky Linux Security Advisory RLSA-2026:76763 vom 2026-10-07
https://errata.build.resf.org/RLSA-2026:76763
-
Oracle Linux Security Advisory ELSA-2026-76763 vom 2026-10-07
https://linux.oracle.com/errata/ELSA-2026-76763.html
-
Oracle Linux Security Advisory ELSA-2026-79371 vom 2026-10-09
https://linux.oracle.com/errata/ELSA-2026-79371.html
-
Red Hat Security Advisory RHSA-2026:79371 vom 2026-10-08
https://access.redhat.com/errata/RHSA-2026:79371
-
Rocky Linux Security Advisory RLSA-2026:79371 vom 2026-10-10
https://errata.build.resf.org/RLSA-2026:79371
-
Oracle Linux Security Advisory ELSA-2026-80825 vom 2026-10-12
https://linux.oracle.com/errata/ELSA-2026-80825.html
-
Red Hat Security Advisory RHSA-2026:80825 vom 2026-10-12
https://access.redhat.com/errata/RHSA-2026:80825
-
Rocky Linux Security Advisory RLSA-2026:80825 vom 2026-10-14
https://errata.build.resf.org/RLSA-2026:80825
-
Debian Security Advisory DLA-4873 vom 2026-10-31
https://lists.debian.org/debian-lts-announce/2026/10/msg00066.html
-
Red Hat Security Advisory RHSA-2026:98477 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98477
-
Red Hat Security Advisory RHSA-2026:98587 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98587
-
Rocky Linux Security Advisory RLSA-2026:98587 vom 2026-11-13
https://errata.build.resf.org/RLSA-2026:98587