Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: The Dovecot Project Dovecot — USN-3587-1 Clear all filters
TI-2017-11100 CVE-2017-15130 · GHSA-36px-qc55-gxh7

Uncontrolled resource consumption in dovecot

Priority LOW 31

A denial of service flaw was found in dovecot before 2.2.34.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02553 Published 2018-03-02 Partial fix · 2.2.34 CWE-400
TI-2017-10567 CVE-2017-14461 · GHSA-r34f-p748-2x25

Out-of-bounds read in Dovecot

Priority MEDIUM 48

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.16677 Published 2018-03-02 No fix listed CWE-125