dovecot vulnerabilities

Known vulnerabilities in the dovecot package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Improper Authentication	<1:2.3.4.1-5+deb10u7
M Arbitrary Command Injection	<1:2.3.4.1-5+deb10u7
L Insufficient Comparison	*
H Improper Input Validation	<1:2.3.4.1-5+deb10u5
M CVE-2020-24386	<1:2.3.4.1-5+deb10u5
H Out-of-bounds Read	<1:2.3.4.1-5+deb10u3
H Out-of-bounds Read	<1:2.3.4.1-5+deb10u3
H Uncontrolled Recursion	<1:2.3.4.1-5+deb10u3
M Use After Free	<1:2.3.4.1-5+deb10u2
H NULL Pointer Dereference	<1:2.3.4.1-5+deb10u2
M Improper Input Validation	<1:2.3.4.1-5+deb10u2
C Out-of-bounds Write	<1:2.3.4.1-5+deb10u1
H CVE-2019-11499	<1:2.3.4.1-5
H CVE-2019-11494	<1:2.3.4.1-5
H CVE-2019-10691	<1:2.3.4.1-4
H Out-of-Bounds	<1:2.3.4.1-3
M Improper Certificate Validation	<1:2.3.4.1-1
H Improper Input Validation	<1:2.2.27-3
H Information Exposure	<1:2.2.34-1
M Resource Exhaustion	<1:2.2.34-1
H Missing Release of Resource after Effective Lifetime	<1:2.2.34-1
M Improper Certificate Validation	<1:2.2.13-12
M Improper Input Validation	<1:2.2.27-1
L Improper Authentication	<1:2.2.13~rc1-1
L Improper Authentication	<1:2.2.9-1
L Improper Input Validation	<1:2.0.18-1
L Configuration	<1:2.0.13-1
M Improper Input Validation	<1:2.0.13-1
L Directory Traversal	<1:2.0.13-1
M CVE-2010-3780	<1:1.2.15-1
L Access Restriction Bypass	<1:1.2.15-1
M Access Restriction Bypass	<1:1.2.15-1
M Access Restriction Bypass	<1:1.2.15-1
M Access Restriction Bypass	<1.2.13-1
L Resource Management Errors	<1:1.2.11-1
M Access Restriction Bypass	<1:1.2.8-1
M Out-of-Bounds	<1:1.2.1-1
M Out-of-Bounds	<1:1.2.1-1
M Directory Traversal	<1:1.0.15-2.3
L Improper Input Validation	<1:1.1.7-1
L Access Restriction Bypass	*
L Access Restriction Bypass	<1:1.0.15-2.2
L Access Restriction Bypass	<1:1.1.9-1
M Credentials Management	<1:1.0.13-1
M Configuration	<1:1.0.12-1
L Access Restriction Bypass	<1:1.0.10-1
L CVE-2007-4211	<1:1.0.3-2
M CVE-2007-2231	<1.0.rc29-1
M CVE-2006-5973	<1.0.rc15-1
L CVE-2006-2414	<1.0.beta8-1
M Out-of-Bounds	<1.0.beta3-1

Vulnerability

Vulnerable Version

Improper Authentication

<1:2.3.4.1-5+deb10u7

Arbitrary Command Injection

<1:2.3.4.1-5+deb10u7

Insufficient Comparison