https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T11:30:29.926236+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1887 ALSA-2021:1887 — Moderate: dovecot security and bug fix update 2026-10-15T11:30:29.942540+00:00

Affected: AlmaLinux:8: dovecot, AlmaLinux:8: dovecot-devel, AlmaLinux:8: dovecot-mysql, AlmaLinux:8: dovecot-pgsql, AlmaLinux:8: dovecot-pigeonhole

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.

Security Fix(es):

* dovecot: IMAP hibernation function allows mail access (CVE-2020-24386)

* dovecot: Denial of service via mail MIME parsing (CVE-2020-25275)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01901 bdu:2021-01901 2026-10-15T11:30:29.942612+00:00 bdu:2021-01901 https://cve.radiocsirt.org/vuln/cnvd-2021-01531 cnvd-2021-01531 2026-10-15T11:30:29.942630+00:00 cnvd-2021-01531 https://cve.radiocsirt.org/vuln/euvd-2026-45516 EUVD-2026-45516 2026-10-15T11:30:29.942643+00:00 EUVD-2026-45516 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25275 fkie_cve-2020-25275 2026-10-15T11:30:29.942654+00:00

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

 https://cve.radiocsirt.org/vuln/ghsa-jv8c-8hrc-9f7m GHSA-jv8c-8hrc-9f7m 2026-10-15T11:30:29.942674+00:00

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

 https://cve.radiocsirt.org/vuln/gsd-2020-25275 gsd-2020-25275 2026-10-15T11:30:29.942688+00:00 gsd-2020-25275 https://cve.radiocsirt.org/vuln/oesa-2021-1042 OESA-2021-1042 — dovecot security update 2026-10-15T11:30:29.942697+00:00

Affected: openEuler:20.03-LTS: dovecot, openEuler:20.03-LTS-SP1: dovecot

Security Fix(es): Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.(CVE-2020-25275) An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages (and path disclosure).(CVE-2020-24386)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0026-1 openSUSE-SU-2021:0026-1 — Security update for dovecot23 2026-10-15T11:30:29.942721+00:00

Security update for dovecot23

 https://cve.radiocsirt.org/vuln/suse-su-2021:0027-1 SUSE-SU-2021:0027-1 — Security update for dovecot23 2026-10-15T11:30:29.942750+00:00

Security update for dovecot23

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25275 UBUNTU-CVE-2020-25275 2026-10-15T11:30:29.942788+00:00

Affected: Ubuntu:Pro:14.04:LTS: dovecot, Ubuntu:16.04:LTS: dovecot, Ubuntu:18.04:LTS: dovecot, Ubuntu:20.04:LTS: dovecot

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0234 WID-SEC-W-2025-0234 — Dovecot: Mehrere Schwachstellen 2026-10-15T11:30:29.942824+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.