Red Hat Enterprise Linux 6/dovecot

Red Hat · Package

53 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
dovecot insecure SSL/TLS key and certificate file creationCVE-2016-4983	Red Hat Enterprise Linux 4/dovecot Red Hat Enterprise Linux 5/dovecot	Red Hat	Low	No fix reported	Not recorded
dovecot: Auth leaks memory if SASL authentication is abortedCVE-2017-15132	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-serviceCVE-2017-14461	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: TLS SNI config lookups are inefficient and can be used for DoSCVE-2017-15130	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Low	No fix reported	Not recorded
dovecot: Improper certificate validationCVE-2019-3814	Red Hat Enterprise Linux 5/dovecot Red Hat Enterprise Linux 6/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: Buffer overflow in indexer-worker process results in privilege escalationCVE-2019-7524	Red Hat Enterprise Linux 5/dovecot Red Hat Enterprise Linux 6/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: Resource exhaustion via deeply nested MIME partsCVE-2020-12100	Red Hat Enterprise Linux 6/dovecot	Red Hat	High	No fix reported	Not recorded
dovecot: Denial of service via mail MIME parsingCVE-2020-25275	Red Hat Enterprise Linux 5/dovecot Red Hat Enterprise Linux 6/dovecot	Red Hat	Low	No fix reported	Not recorded
dovecot: IMAP hibernation function allows mail accessCVE-2020-24386	Red Hat Enterprise Linux 5/dovecot Red Hat Enterprise Linux 6/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: insufficient protection against excessive resource usage allows for a DoSCVE-2020-28200	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: plaintext commands injectionCVE-2021-33515	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 9/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: local attacker can login as any user and access their emailsCVE-2021-29157	Red Hat Enterprise Linux 6/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: very large headers can cause resource exhaustion when parsing messageCVE-2024-23185	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: using a large number of address headers may trigger a denial of serviceCVE-2024-23184	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: Dovecot: Denial of Service via invalid SASL dataCVE-2025-59028	Red Hat Enterprise Linux 10/dovecot Red Hat Enterprise Linux 6/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: Dovecot: Information disclosure via specially crafted OOXML documentsCVE-2025-59031	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE commandCVE-2025-59032	Red Hat Enterprise Linux 6/dovecot	Red Hat	High	No fix reported	Not recorded
dovecot: Dovecot: Information disclosure and authentication bypass via path traversalCVE-2026-0394	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded
dovecot: Dovecot: Authentication bypass and user enumeration due to cleared auth_username_chars configurationCVE-2026-24031	Red Hat Enterprise Linux 6/dovecot	Red Hat	High	No fix reported	Not recorded
dovecot: Dovecot: Replay attack allows unauthorized login via observed One-Time Password (OTP) exchangeCVE-2026-27855	Red Hat Enterprise Linux 6/dovecot Red Hat Enterprise Linux 7/dovecot	Red Hat	Medium	No fix reported	Not recorded