DO
Product
Dovecot
69
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 20Medium 23Low 1
Watch
Add Dovecot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24386 | 6.8 | Jan 4 | An issue was discovered in Dovecot before 2.3.13 Affected: 2.2.26 before 2.3.13 |
| CVE-2019-3814 | 6.8 | Mar 27 | It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates Affected: 1.1.0 before 2.2.36.1; 2.3.0 before 2.3.4.1 |
| CVE-2026-40016 | 6.5 | May 12 | Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit Affected: before 2.4.4 |
| CVE-2026-27856 | 5.9 | Mar 27 | Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack Affected: before 2.4.3 |
| CVE-2026-27855 | 5.9 | Mar 27 | Dovecot OTP authentication is vulnerable to replay attack under specific conditions Affected: before 2.4.3 |
| CVE-2017-15130 | 5.9 | Mar 2 | A denial of service flaw was found in dovecot before 2.2.34 Affected: before 2.2.34 |
| CVE-2015-3420 | 5.9 | Sep 19 | The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to… Affected: through 2.2.16 |
| CVE-2016-8652 | 5.9 | Feb 17 | The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without… Affected: through 2.2.27 |
| CVE-2021-29157 | 5.5 | Jun 28 | Dovecot before 2.3.15 allows ../ Path Traversal Affected: 2.3.11 before 2.3.14.1 |
| CVE-2009-3897 | 5.5 | Nov 24 | Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by… Affected: 1.2.0 before 1.2.8 |
| CVE-2026-33603 | 5.3 | May 12 | Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding Affected: before 2.4.4 |
| CVE-2026-27860 | 5.3 | Mar 27 | If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication Affected: before 2.4.3 |
| CVE-2026-27859 | 5.3 | Mar 27 | A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU Affected: before 2.4.3 |
| CVE-2026-0394 | 5.3 | Mar 27 | When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal… Affected: before 2.4.0 |
| CVE-2020-10967 | 5.3 | May 18 | In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart Affected: before 2.3.10.1 |
| CVE-2020-10958 | 5.3 | May 18 | In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under… Affected: before 2.3.10.1 |
| CVE-2020-7957 | 5.3 | Feb 12 | The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character… Affected: 2.3.9 before 2.3.9.3 |
| CVE-2019-19722 | 5.3 | Dec 13 | In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference Affected: before 2.3.9.2 |
| CVE-2021-33515 | 4.8 | Jun 28 | The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp Affected: before 2.3.14.1 |
| CVE-2026-42006 | 4.3 | May 12 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP Affected: before 2.4.4 |
| CVE-2026-40020 | 4.3 | May 12 | Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no Affected: before 2.4.4 |
| CVE-2025-59031 | 4.3 | Mar 27 | Dovecot has provided a script to use for attachment to text conversion Affected: before 2.4.3 |
| CVE-2020-28200 | 4.3 | Jun 28 | The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension Affected: before 2.3.15 |
Showing 23