Red Hat Security Advisory

RHSA-2024:6529

dovecot security update

Released 2024-09-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) dovecot-1:2.3.16-11.el9_4.1, dovecot-mysql-1:2.3.16-11.el9_4.1, dovecot-pgsql-1:2.3.16-11.el9_4.1 +1
Red Hat Enterprise Linux CRB (v. 9) dovecot-1:2.3.16-11.el9_4.1, dovecot-devel-1:2.3.16-11.el9_4.1

TI-2024-15297 CVE-2024-23185 · GHSA-g9m4-c8qf-67qw

MEDIUM 41

Very large headers can cause resource exhaustion when parsing message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01295 Published 2024-09-10 Partial fix CWE-770

TI-2024-15296 CVE-2024-23184 · GHSA-5f48-j349-fj3m

LOW 24

Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00839 Published 2024-09-10 Partial fix CWE-770