OX Dovecot CE at a glance
- Last 12 months
- 25
- Critical · all time
- 1
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 25 | 1 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
25 results · Feed
-
Medium 6.5
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its…
-
High 7.4
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response…
-
Medium 6.5
An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression s…
-
Low 3.1
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the acc…
-
Medium 4.3
A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process…
-
Low 3.1
The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the conf…
-
Medium 4.3
An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to …
-
High 7.5
An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which…
-
Medium 4.3
Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentic…
-
Critical 9.1
An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free…
-
Medium 5.9
An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more th…
-
Low 3.1
None None None No publicly available exploits are known.
-
Low 3.7
When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes…
-
Medium 5.9
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin …
-
High 7.4
None None None No publicly available exploits are known.
-
Medium 6.5
An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal h…
-
Medium 4.3
An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid command…
-
Medium 6.5
An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disp…
-
Medium 4.3
An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an…
-
Medium 4.3
An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial o…
-
Medium 4.8
Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator…
-
High 7.5
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authent…
-
Medium 5.9
An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a …
-
Medium 4.3
When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused …
-
High 7.5
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email address…