Direct Vulnerabilities

Known vulnerabilities in the dovecot package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Incorrect Implementation of Authentication Algorithm

<1:2.3.16-16.el8_10
  • M
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Allocation of Resources Without Limits or Throttling

<1:2.3.16-16.el8_10
  • M
Use of Uninitialized Resource

*
  • L
Information Exposure

*
  • M
CRLF Injection

*
  • H
Use of Expired File Descriptor

<1:2.3.16-16.el8_10
  • H
Improper Validation of Syntactic Correctness of Input

<1:2.3.16-16.el8_10
  • L
Allocation of Resources Without Limits or Throttling

*
  • H
Allocation of Resources Without Limits or Throttling

<1:2.3.16-16.el8_10
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Expired Pointer Dereference

<1:2.3.16-16.el8_10
  • L
Insufficient Granularity of Access Control

*
  • M
Out-of-bounds Read

*
  • M
Incorrect Implementation of Authentication Algorithm

*
  • M
Unchecked Input for Loop Condition

*
  • M
Out-of-bounds Write

*
  • L
Information Exposure

*
  • M
Improper Null Termination

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:2.3.16-16.el8_10
  • H
SQL Injection

<1:2.3.16-16.el8_10
  • M
OS Command Injection

*
  • M
Unchecked Input for Loop Condition

*
  • H
Allocation of Resources Without Limits or Throttling

<1:2.3.16-8.el8_10
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Verification of Source of a Communication Channel

*
  • M
Arbitrary Argument Injection

*
  • H
Improper Handling of Values

<1:2.3.16-7.el8_10
  • H
Allocation of Resources Without Limits or Throttling

<1:2.3.16-7.el8_10
  • H
Allocation of Resources Without Limits or Throttling

<1:2.3.16-7.el8_10
  • L
LDAP Injection

*
  • M
Improper Validation of Syntactic Correctness of Input

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

<1:2.3.16-6.el8_10
  • M
Allocation of Resources Without Limits or Throttling

<1:2.3.16-6.el8_10
  • M
Improper Access Control

<1:2.3.16-3.el8
  • M
Resource Exhaustion

<1:2.3.8-4.el8
  • M
Use After Free

<1:2.3.8-4.el8
  • H
Out-of-bounds Read

<1:2.3.8-2.el8_2.2
  • H
Out-of-bounds Read

<1:2.3.8-2.el8_2.2
  • H
Resource Exhaustion

<1:2.3.8-2.el8_2.1
  • H
Uncontrolled Recursion

<1:2.3.8-2.el8_2.2
  • M
Improper Input Validation

<1:2.3.8-9.el8
  • M
Improper Neutralization of Special Elements

<1:2.3.8-9.el8
  • M
Improper Certificate Validation

<1:2.2.36-10.el8
  • H
Improper Input Validation

<1:2.2.36-5.el8_0.1
  • M
Arbitrary Command Injection

<1:2.3.16-2.el8
  • M
Resource Exhaustion

*