153 matches found
EUVD-2010-3759
Malware in sbrugna...
EUVD-2016-5951
Malware in sbrugna...
EUVD-2020-17118
Malware in sbrugna...
EUVD-2020-28180
Malware in sbrugna...
EUVD-2020-3368
Malware in sbrugna...
EUVD-2023-38211
Malicious code in bioql PyPI...
EUVD-2020-3361
Malicious code in bioql PyPI...
EUVD-2024-20704
Malicious code in bioql PyPI...
Advisory ROSA-SA-2025-3014
software: cert-sh-functions 1.0.6 WASP: ROSA-CHROME unaffected versions = cert-sh-functions-1.0.6-5 affected versions cert-sh-functions-1.0.6-5 CVE-ID: CVE-2022-30550 BDU-ID: 2022-04273 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the passdb account database of the Dovecot mail server is relate...
Linux Distros Unpatched Vulnerability : CVE-2024-23185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when i...
CVE-2020-26102
In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM SEC-550...
Linux Distros Unpatched Vulnerability : CVE-2019-3814
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a valid...
Amazon Linux 2 : dovecot (ALAS-2024-2719)
The version of dovecot installed on the remote host is prior to 2.2.36-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2719 advisory. Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers. CVE-2024-23185 Tenabl...
Astra Linux – Vulnerability in dovecot
Having a large number of address headers From, To, Cc, Bcc, etc. can lead to excessive CPU usage. With 100,000 header lines, CPU usage reaches 12 seconds; in a production environment, parsing 500,000 header lines takes 18 minutes. This issue can be triggered by external actors sending emails to...
USN-7013-1 dovecot vulnerabilities
It was discovered that Dovecot incorrectly handled a large number of address headers. A remote attacker could possibly use this issue to cause Dovecot to consume resources, leading to a denial of service. CVE-2024-23184 It was discovered that Dovecot incorrectly handled very large headers. A remo...
CVE-2024-23185
Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...
AZL-69869 CVE-2024-25584 affecting package dovecot 2.3.20-1
Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. This causes Dovecot to convert single mail with LF DOT LF in middle, into two emails when relaying to SMTP. Dovecot will split mail with LF DOT LF into two mails. Upgrade to latest...
PT-2024-7272 · Dovecot +10 · Dovecot +10
Name of the Vulnerable Software and Affected Versions: Dovecot affected versions not specified Description: The issue is related to resource exhaustion when parsing messages with very large headers. The message-parser reads reasonably sized chunks of the message, but when it feeds them to the...
SUSE CVE-2007-2231
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...