2529 matches found
[SECURITY] [DSA 5752-1] dovecot security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5752-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 21, 2024 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-5752-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dsa-5752 : dovecot-auth-lua - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5752 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5752-1 [email protected] https://www.debian.org/securit...
DSA-5752-1 dovecot - security update
Bulletin has no description...
OPENSUSE-SU-2024:14274-1 dovecot23-2.3.21.1-1.1 on GA media
These are all security issues fixed in the dovecot23-2.3.21.1-1.1 package on the GA media of openSUSE Tumbleweed...
Dovecot IMAP Server 2.2 / 2.3 Denial Of Service
Affected product: Dovecot IMAP Server Internal reference: DOV-6601 Vulnerability type: CWE-770 Allocation of Resources Without Limits or Throttling Vulnerable version: 2.2, 2.3 Vulnerable component: lib-mail Report confidence: Confirmed Solution status: Fixed in 2.3.21.1 Researcher credits: Vendo...
Dovecot IMAP Server 2.2 / 2.3 Missing Rate Limiting
Affected product: Dovecot IMAP Server Internal reference: DOV-6464 Vulnerability type: CWE-770 Allocation of Resources Without Limits or Throttling Vulnerable version: 2.2, 2.3 Vulnerable component: lib-mail Report confidence: Confirmed Solution status: Fixed in 2.3.21.1 Researcher credits: Vendo...
Mageia: Security Advisory (MGASA-2024-0280)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : Dovecot -- DoS (6a6ad6cb-5c6c-11ef-b456-001e676bf734)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6a6ad6cb-5c6c-11ef-b456-001e676bf734 advisory. Dovecot reports: A DoS is possible with a large number of address headers or abnormally large...
SUSE CVE-2024-23184
Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...
SUSE CVE-2024-23185
Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...
Slackware: Security Advisory (SSA:2024-227-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dovecot 2.2.x < 2.3.21.1 Multiple Vulnerabilities
Dovecot is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dovecot:dovecot"; ifdescription...
PT-2024-5814 · Dovecot +10 · Dovecot Imap Server +10
Name of the Vulnerable Software and Affected Versions: Dovecot IMAP Server versions 2.2 through 2.3.20 Description: The issue is related to the excessive CPU usage caused by a large number of address headers in emails, which can be exploited by external actors to consume system resources and caus...
[slackware-security] dovecot
New dovecot packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/dovecot-2.3.21.1-i586-1slack15.0.txz: Upgraded. This update fixes security issues: A large number of address headers in email resulte...
Slackware Linux 15.0 / current dovecot Multiple Vulnerabilities (SSA:2024-227-01)
The version of dovecot installed on the remote host is prior to 2.3.21.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-227-01 advisory. New dovecot packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
Dovecot -- DoS
Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers...
PT-2024-7272 · Dovecot +10 · Dovecot +10
Name of the Vulnerable Software and Affected Versions: Dovecot affected versions not specified Description: The issue is related to resource exhaustion when parsing messages with very large headers. The message-parser reads reasonably sized chunks of the message, but when it feeds them to the...