Security update for dovecot23 (important)

openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2021:0072-1 Rating: important References: 1174920 1180405 1180406 Cross-References: CVE-2020-12100 CVE-2020-24386 CVE-2020-25275 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is...

FreeBSD : mail/dovecot -- multiple vulnerabilities (bd98066d-4ea4-11eb-b412-e86a64caca56)

Aki Tuomi reports : When imap hibernation is active, an attacker can cause Dovecot to discover file system directory structure and access other users' emails using specially crafted command. The attacker must have valid credentials to access the mail server. Mail delivery / parsing crashed when t...

Debian: Security Advisory (DLA-2517-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4674-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2517-1 : dovecot security update

It was discovered that there were two issues in the Dovecot IMAP server : - CVE-2020-24386: Prevent an issue where an attacker could cause Dovecot to discover file system directory structure and even access other users' emails using a pecially crafted command. - CVE-2020-25275: Prevent an issue...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2021:0028-1)

This update for dovecot23 fixes the following issues : Security issues fixed : CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts bsc1174920. CVE-2020-12673: Fixed an improper implementation of NTLM that did not check the message buffer size bsc1174922. CVE-2020-12674:...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2021:0029-1)

This update for dovecot23 fixes the following issues : Security issues fixed : CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts bsc1174920. CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails bsc1180405. CVE-2020-2527...

[SECURITY] [DLA 2517-1] dovecot security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2517-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 05, 2021 https://wiki.debian.org/LTS -...

Debian DSA-4825-1 : dovecot - security update

Several vulnerabilities have been discovered in the Dovecot email server. - CVE-2020-24386 When imap hibernation is active, an attacker with valid credentials to access the mail server can cause Dovecot to discover file system directory structures and access other users' emails via specially...

SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2021:0018-1)

This update for dovecot22 fixes the following issues : CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails bsc1180405. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

ALPINE-CVE-2020-24386

An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages and path disclosure...

CVE-2020-24386

CVE-2020-24386 affects Dovecot prior to 2.3.13. An authenticated user can abuse IMAP IDLE to trigger unhibernation via attacker-controlled parameters, enabling access to other users’ emails and path disclosure. Multiple connected advisories confirm fixes in downstream distributions (e.g., Dovecot...

[SECURITY] [DSA 4825-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4825-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 04, 2021 https://www.debian.org/security/faq -...

CVE-2020-24386

An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages and path disclosure. Mitigation To mitigate this flaw, ensure that imaphibernatetimeout is...

SUSE-SU-2021:0018-1 Security update for dovecot22

This update for dovecot22 fixes the following issues: - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails bsc1180405...

USN-4674-1 dovecot vulnerabilities

It was discovered that Dovecot incorrectly handled certain imap hibernation commands. A remote authenticated attacker could possibly use this issue to access other users' email. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. CVE-2020-24386 Innokentii Sennovskiy...

CVE-2020-24386

An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages and path disclosure...