The Dovecot Project Dovecot
3 CVEs affecting The Dovecot Project Dovecot. Latest disclosed: 2018-03-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15132 | High | 7.5 | 2018-01-25 | A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login process… |
CVE-2017-15130 | Medium | 5.9 | 2018-03-02 | A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups… |
CVE-2017-14461 | Medium | 5.9 | 2018-03-02 | A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information di… |