170380 matches found
DEBIAN-CVE-2026-40014
An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...
DEBIAN-CVE-2026-40019
An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This can cause degradation or denial of service for Sieve script management, and repeated connections can consume all available CPU on the...
DEBIAN-CVE-2026-33604
An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...
DEBIAN-CVE-2026-33263
When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...
DEBIAN-CVE-2026-33606
Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, includi...
DEBIAN-CVE-2026-27852
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...
MINI-X779-H923-3HR9
Bulletin has no description...
MINI-PQCR-XP7M-22J4
Bulletin has no description...
MINI-HV34-M4VF-73HF
Bulletin has no description...
MINI-3GPR-85M8-53VH
Bulletin has no description...
MINI-PCJV-CP2R-P966
Bulletin has no description...
MINI-GRVW-XC67-5HWW
Bulletin has no description...
MINI-4G2X-766G-C66R
Bulletin has no description...
MINI-9H95-XVM8-34PP
Bulletin has no description...
MINI-C89P-R8P2-Q2FX
Bulletin has no description...
MINI-78QW-P46F-477W
Bulletin has no description...
MINI-PMJM-X5XW-XVG2
Bulletin has no description...
MINI-JR46-H5QM-99FC
Bulletin has no description...