Most recent entries from all

bdu:2021-03235

EUVD-2026-46954

fkie_cve-2020-28200

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.

GHSA-f6jc-wwhw-gpq7

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.

gsd-2020-28200

msrc_CVE-2020-28200 — The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption as demonstrated by a situation with…

msrc_CVE-2020-28200

OESA-2021-1270 — dovecot security update

Affected: openEuler:20.03-LTS-SP1: dovecot

Dovecot is an IMAP server for Linux/UNIX-like systemsa wrapper package that will just handle common things for all versioned dovecot packages. Security Fix(es): The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.(CVE-2020-28200) The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.(CVE-2021-33515)

openSUSE-SU-2021:1225-1 — Security update for dovecot23

Security update for dovecot23

SUSE-SU-2021:2890-1 — Security update for dovecot23

Security update for dovecot23

UBUNTU-CVE-2020-28200

Affected: Ubuntu:Pro:14.04:LTS: dovecot, Ubuntu:16.04:LTS: dovecot, Ubuntu:18.04:LTS: dovecot, Ubuntu:20.04:LTS: dovecot

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.

WID-SEC-W-2022-1536 — Dovecot: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um einen Denial of Service Angriff durchzuführen, Benutzerrechte erlangen oder Informationen offenzulegen.