Red Hat Security Advisory

RHSA-2024:6465

dovecot security update

Released 2024-09-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.2) dovecot-1:2.3.16-8.el9_2.1, dovecot-devel-1:2.3.16-8.el9_2.1
Red Hat Enterprise Linux AppStream EUS (v.9.2) dovecot-1:2.3.16-8.el9_2.1, dovecot-mysql-1:2.3.16-8.el9_2.1, dovecot-pgsql-1:2.3.16-8.el9_2.1 +1

TI-2024-15297 CVE-2024-23185 · GHSA-g9m4-c8qf-67qw

MEDIUM 41

Very large headers can cause resource exhaustion when parsing message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01295 Published 2024-09-10 Partial fix CWE-770

TI-2024-15296 CVE-2024-23184 · GHSA-5f48-j349-fj3m

LOW 24

Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00839 Published 2024-09-10 Partial fix CWE-770