Security
فارسی
All products

Red Hat Enterprise Linux 7/dovecot

Red Hat · Package
39 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
dovecot insecure SSL/TLS key and certificate file creationCVE-2016-4983 Red Hat Enterprise Linux 4/dovecotRed Hat Enterprise Linux 5/dovecot Red Hat Low No fix reported
dovecot: Auth leaks memory if SASL authentication is abortedCVE-2017-15132 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-serviceCVE-2017-14461 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: TLS SNI config lookups are inefficient and can be used for DoSCVE-2017-15130 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Low No fix reported
dovecot: Denial of service via mail MIME parsingCVE-2020-25275 Red Hat Enterprise Linux 5/dovecotRed Hat Enterprise Linux 6/dovecot Red Hat Low No fix reported
dovecot: IMAP hibernation function allows mail accessCVE-2020-24386 Red Hat Enterprise Linux 5/dovecotRed Hat Enterprise Linux 6/dovecot Red Hat Medium No fix reported
dovecot: insufficient protection against excessive resource usage allows for a DoSCVE-2020-28200 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: Privilege escalation when similar master and non-master passdbs are usedCVE-2022-30550 Red Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: very large headers can cause resource exhaustion when parsing messageCVE-2024-23185 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: using a large number of address headers may trigger a denial of serviceCVE-2024-23184 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: Dovecot: Denial of Service via invalid SASL dataCVE-2025-59028 Red Hat Enterprise Linux 10/dovecotRed Hat Enterprise Linux 6/dovecot Red Hat Medium No fix reported
dovecot: Dovecot: Information disclosure via specially crafted OOXML documentsCVE-2025-59031 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: Dovecot: Information disclosure and authentication bypass via path traversalCVE-2026-0394 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: Dovecot: Replay attack allows unauthorized login via observed One-Time Password (OTP) exchangeCVE-2026-27855 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat Medium No fix reported
dovecot: Dovecot: Denial of Service via excessive RFC 2231 MIME parametersCVE-2026-27859 Red Hat Enterprise Linux 10/dovecotRed Hat Enterprise Linux 6/dovecot Red Hat Medium No fix reported
dovecot: Dovecot: Authentication bypass and information disclosure via LDAP filter injectionCVE-2026-27860 Red Hat Enterprise Linux 10/dovecotRed Hat Enterprise Linux 6/dovecot Red Hat Low No fix reported
dovecot: Dovecot: Denial of service via crafted email headersCVE-2026-27852 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat High No fix reported
dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustionCVE-2026-33263 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat High No fix reported
dovecot: Dovecot: SMTP smuggling vulnerability allows spoofed email injectionCVE-2026-33604 Red Hat Enterprise Linux 10/dovecotRed Hat Enterprise Linux 6/dovecot Red Hat Medium No fix reported
dovecot: Dovecot: Denial of Service in ManageSieve login processCVE-2026-33605 Red Hat Enterprise Linux 6/dovecotRed Hat Enterprise Linux 7/dovecot Red Hat High No fix reported