RHSA-2020:2901 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2020:4763 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2019:2885 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2019:2836 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2019:2822 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2020:1062 Red Hat Security Advisory: dovecot security and bug fix update

Bulletin has no description...

RHSA-2019:3467 Red Hat Security Advisory: dovecot security and bug fix update

Bulletin has no description...

Rocky Linux 9 : dovecot (RLSA-2024:6529)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6529 advisory. dovecot: using a large number of address headers may trigger a denial of service CVE-2024-23184 dovecot: very large headers can cause resource exhaustio...

Ubuntu 20.04 LTS / 22.04 LTS : Dovecot vulnerabilities (USN-7013-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7013-1 advisory. It was discovered that Dovecot incorrectly handled a large number of address headers. A remote attacker could possibly use this issue to caus...

RHSA-2014:0790 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2013:0520 Red Hat Security Advisory: dovecot security and bug fix update

Bulletin has no description...

RHSA-2011:1187 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2011:0600 Red Hat Security Advisory: dovecot security and enhancement update

Bulletin has no description...

RHSA-2009:0205 Red Hat Security Advisory: dovecot security and bug fix update

Bulletin has no description...

RHSA-2008:0297 Red Hat Security Advisory: dovecot security and bug fix update

Bulletin has no description...

AlmaLinux 9 : dovecot (ALSA-2024:6529)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6529 advisory. dovecot: using a large number of address headers may trigger a denial of service CVE-2024-23184 dovecot: very large headers can cause resource exhaustion...

AZL-49024 CVE-2024-23184 affecting package dovecot 2.3.20-1

Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...

AZL-49027 CVE-2024-23185 affecting package dovecot 2.3.20-1

Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...

AZL-48981 CVE-2024-23184 affecting package dovecot 2.3.20-1

Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...

CVE-2024-23184

Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...