2366 matches found
PT-2026-28308
Name of the Vulnerable Software and Affected Versions Dovecot affected versions not specified Description Dovecot is susceptible to a path traversal issue when configured to use per-domain passwd files. If these files are located one path component above /etc, or if a slash character is included ...
PT-2026-28367
Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3-1.1 Description A mail message with a large number of RFC 2231 MIME parameters can cause excessive CPU usage in LMTP. A specially crafted message can lead to significant CPU time consumption during mail delivery...
PT-2026-28368
Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3 Description If the auth username chars setting is empty, an attacker can inject arbitrary LDAP filters into Dovecot's LDAP authentication process. This can bypass restrictions and allow probing of the LDAP...
PT-2026-28365
Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3 Description Sending a "NOOP ..." command with a large number of parentheses e.g., 4000 open and close can lead to excessive memory consumption, approximately 1MB per command. Prolonged use of this technique, by...
PT-2026-28364
Name of the Vulnerable Software and Affected Versions Doveadm affected versions not specified Description Doveadm credentials are verified using direct comparison, which is susceptible to a timing oracle attack. An attacker could potentially determine the configured credentials, leading to full...
PT-2026-28366
Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3 Description An attacker can send a crafted message before authentication, leading to excessive memory allocation within the managesieve component. This can cause the managesieve-login process to crash, potential...
SUSE: Security Advisory (SUSE-SU-2025:21159-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dovecot 2.4.0 < 2.4.2 Improper Access Control Vulnerability
Dovecot is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dovecot:dovecot";...
openSUSE 16 Security Update : dovecot24 (openSUSE-SU-2025-20113-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025-20113-1 advisory. - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled bsc1252839 - Changes - auth: Remove...
Fedora: Security Advisory (FEDORA-2025-e491c93405)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for dovecot24 (moderate)
openSUSE security update: security update for dovecot24 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20113-1 Rating: moderate References: bsc1252839 Cross-References: CVE-2025-30189 CVSS scores: CVE-2025-30189 SUSE : 6.4...
SUSE-SU-2025:21159-1 Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled bsc1252839 - Changes - auth: Remove proxyalways field. - config: Change settings history parsing to use python3. - doveadm: Print...
OPENSUSE-SU-2025-20113-1 Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled bsc1252839 - Changes - auth: Remove proxyalways field. - config: Change settings history parsing to use python3. - doveadm: Print...
[SECURITY] Fedora 43 Update: dovecot-2.4.1-8.fc43
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...
Fedora 43 : dovecot (2025-e491c93405)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e491c93405 advisory. fixes CVE-2025-30189 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...
TencentOS Server 3: dovecot (TSSA-2022:0239)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0239 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
AZL-69833 CVE-2025-30189 affecting package dovecot 2.3.20-1
When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users. After cached login, all subsequent logins are for same user. Install fixed version or disable caching either globally or for the impacted...
AZL-69835 CVE-2025-30189 affecting package dovecot 2.3.20-1
When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users. After cached login, all subsequent logins are for same user. Install fixed version or disable caching either globally or for the impacted...
Open-Xchange OX Dovecot Pro 安全漏洞
Open-Xchange OX Dovecot Pro is a mail storage and delivery system from Open-Xchange Germany. A security vulnerability exists in Open-Xchange OX Dovecot Pro that stems from the passdb or userdb driver incorrectly caching all users with the same cache key when caching is enabled, causing subsequent...