CVE catalog

CVE-2022-30550

dovecot: CVE-2022-30550

Severity: Medium · CVSS 6.8CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Published: Jul 6, 2022, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.29% · Oct 25, 2026

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect username_filter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an unintended security configuration and can permit privilege escalation in certain configurations. The documentation does not advise against the use of passdb definitions that have the same driver and args settings. One such configuration would be where an administrator wishes to use the same PAM configuration or passwd file for both normal and master users but use the username_filter setting to restrict which of the users is able to be a master user.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	dovecot	sid	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	forky	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	trixie	`1:2.4.1+dfsg1-6+deb13u6`	fixed
Debian	dovecot	trixie-security	`1:2.4.1+dfsg1-6+deb13u7`	fixed
Debian	dovecot	bookworm	`1:2.3.19.1+dfsg1-2.1+deb12u6`	fixed
Debian	dovecot	bookworm-security	`1:2.3.19.1+dfsg1-2.1+deb12u6`	fixed
Ubuntu	dovecot	18.04	`1:2.2.27-3ubuntu1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu2`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu3`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.2`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.3`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.4`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.5`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.6`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.7`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.8`	fixed
Ubuntu	dovecot	20.04	`1:2.3.4.1-5ubuntu3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu1`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu2`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.1`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.2`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.4`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.5`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.6`	fixed
Ubuntu	dovecot	22.04	`1:2.3.13+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.1`	fixed
Ubuntu	dovecot	pro	`1:2.1.7-7ubuntu3`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu1`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.1`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.3`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.4`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.5`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm1`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm2`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm3`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm4`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.18-2ubuntu2`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu1`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.1`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.2`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.3`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.4`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.6`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.7`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.8`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.9`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.10`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.11`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.12`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.13`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.14`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.27-3ubuntu1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu2`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu3`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.2`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.3`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.4`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.5`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.6`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.7`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.8`	fixed
Ubuntu	dovecot	20.04	`1:2.3.4.1-5ubuntu3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu1`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu2`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.1`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.2`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.4`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.5`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.6`	fixed
Ubuntu	dovecot	22.04	`1:2.3.13+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.1`	fixed
Suse	dovecot23	linux enterprise high performance computing 15-espos	`2.3.15-150000.4.42.1`	fixed
Suse	dovecot23	linux enterprise high performance computing 15-ltss	`2.3.15-150000.4.42.1`	fixed
Suse	dovecot23	linux enterprise server 15-ltss	`2.3.15-150000.4.42.1`	fixed
Suse	dovecot23	linux enterprise server for sap applications 15	`2.3.15-150000.4.42.1`	fixed
Suse	dovecot22	openstack cloud 9	`2.2.31-19.29.1`	fixed
Suse	dovecot22	openstack cloud crowbar 9	`2.2.31-19.29.1`	fixed
Suse	dovecot22	linux enterprise server for sap applications 12 sp4	`2.2.31-19.29.1`	fixed
Suse	dovecot22	linux enterprise software development kit 12 sp5	`2.2.31-19.29.1`	fixed
Suse	dovecot22	linux enterprise server 12 sp2-bcl	`2.2.31-19.29.1`	fixed
Suse	dovecot22	linux enterprise server 12 sp3-bcl	`2.2.31-19.29.1`	fixed
Suse	dovecot22	linux enterprise server 12 sp4-ltss	`2.2.31-19.29.1`	fixed
Suse	dovecot22	linux enterprise server 12 sp5	`2.2.31-19.29.1`	fixed
Suse	dovecot22	linux enterprise server for sap applications 12 sp5	`2.2.31-19.29.1`	fixed
Suse	dovecot23	linux enterprise module for server applications 15 sp3	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	linux enterprise module for server applications 15 sp4	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	linux enterprise high performance computing 15 sp2-espos	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	linux enterprise high performance computing 15 sp2-ltss	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	linux enterprise server 15 sp2-bcl	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	linux enterprise server 15 sp2-ltss	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	linux enterprise server for sap applications 15 sp2	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	manager proxy 4.1	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	manager retail branch server 4.1	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	manager server 4.1	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	enterprise storage 7	`2.3.15-150200.62.1`	fixed
Opensuse	dovecot23	leap 15.3	`2.3.15-150200.62.1`	fixed
Opensuse	dovecot23	leap 15.4	`2.3.15-150200.62.1`	fixed
Suse	dovecot23	linux enterprise high performance computing 15 sp1-espos	`2.3.15-150100.31.1`	fixed
Suse	dovecot23	linux enterprise high performance computing 15 sp1-ltss	`2.3.15-150100.31.1`	fixed
Suse	dovecot23	linux enterprise server 15 sp1-bcl	`2.3.15-150100.31.1`	fixed
Suse	dovecot23	linux enterprise server 15 sp1-ltss	`2.3.15-150100.31.1`	fixed
Suse	dovecot23	linux enterprise server for sap applications 15 sp1	`2.3.15-150100.31.1`	fixed
Suse	dovecot23	enterprise storage 6	`2.3.15-150100.31.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	dovecot	source	sid	`1:2.3.19.1+dfsg1-2`	not yet assigned	Not reported	[1016351]
Debian	dovecot	source	forky	`1:2.3.19.1+dfsg1-2`	not yet assigned	Not reported	[1016351]
Debian	dovecot	source	trixie	`1:2.3.19.1+dfsg1-2`	not yet assigned	Not reported	[1016351]
Debian	dovecot	source	bookworm	`1:2.3.19.1+dfsg1-2`	not yet assigned	Not reported	[1016351]
Ubuntu	dovecot	deb	18.04	`1:2.2.33.2-1ubuntu4.8`	Not reported	USN-5509-1	Not reported
Ubuntu	dovecot	deb	20.04	`1:2.3.7.2-1ubuntu3.6`	Not reported	USN-5509-1	Not reported
Ubuntu	dovecot	deb	22.04	`1:2.3.16+dfsg1-3ubuntu2.1`	Not reported	USN-5509-1	Not reported
Ubuntu	dovecot	deb	18.04	`1:2.2.33.2-1ubuntu4.8`	Not reported	UBUNTU-CVE-2022-30550	Not reported
Ubuntu	dovecot	deb	20.04	`1:2.3.7.2-1ubuntu3.6`	Not reported	UBUNTU-CVE-2022-30550	Not reported
Ubuntu	dovecot	deb	22.04	`1:2.3.16+dfsg1-3ubuntu2.1`	Not reported	UBUNTU-CVE-2022-30550	Not reported
Suse	dovecot23	rpm	linux enterprise high performance computing 15-espos	`2.3.15-150000.4.42.1`	Not reported	SUSE-SU-2022:2431-1	Not reported
Suse	dovecot23	rpm	linux enterprise high performance computing 15-ltss	`2.3.15-150000.4.42.1`	Not reported	SUSE-SU-2022:2431-1	Not reported
Suse	dovecot23	rpm	linux enterprise server 15-ltss	`2.3.15-150000.4.42.1`	Not reported	SUSE-SU-2022:2431-1	Not reported
Suse	dovecot23	rpm	linux enterprise server for sap applications 15	`2.3.15-150000.4.42.1`	Not reported	SUSE-SU-2022:2431-1	Not reported
Suse	dovecot22	rpm	openstack cloud 9	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	openstack cloud crowbar 9	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	linux enterprise server for sap applications 12 sp4	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	linux enterprise software development kit 12 sp5	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	linux enterprise server 12 sp2-bcl	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	linux enterprise server 12 sp3-bcl	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	linux enterprise server 12 sp4-ltss	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	linux enterprise server 12 sp5	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot22	rpm	linux enterprise server for sap applications 12 sp5	`2.2.31-19.29.1`	Not reported	SUSE-SU-2022:2618-1	Not reported
Suse	dovecot23	rpm	linux enterprise module for server applications 15 sp3	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	linux enterprise module for server applications 15 sp4	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	linux enterprise high performance computing 15 sp2-espos	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	linux enterprise high performance computing 15 sp2-ltss	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	linux enterprise server 15 sp2-bcl	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	linux enterprise server 15 sp2-ltss	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	linux enterprise server for sap applications 15 sp2	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	manager proxy 4.1	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	manager retail branch server 4.1	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	manager server 4.1	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	enterprise storage 7	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Opensuse	dovecot23	rpm	leap 15.3	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Opensuse	dovecot23	rpm	leap 15.4	`2.3.15-150200.62.1`	Not reported	SUSE-SU-2022:2448-1	Not reported
Suse	dovecot23	rpm	linux enterprise high performance computing 15 sp1-espos	`2.3.15-150100.31.1`	Not reported	SUSE-SU-2022:2432-1	Not reported
Suse	dovecot23	rpm	linux enterprise high performance computing 15 sp1-ltss	`2.3.15-150100.31.1`	Not reported	SUSE-SU-2022:2432-1	Not reported
Suse	dovecot23	rpm	linux enterprise server 15 sp1-bcl	`2.3.15-150100.31.1`	Not reported	SUSE-SU-2022:2432-1	Not reported
Suse	dovecot23	rpm	linux enterprise server 15 sp1-ltss	`2.3.15-150100.31.1`	Not reported	SUSE-SU-2022:2432-1	Not reported
Suse	dovecot23	rpm	linux enterprise server for sap applications 15 sp1	`2.3.15-150100.31.1`	Not reported	SUSE-SU-2022:2432-1	Not reported
Suse	dovecot23	rpm	enterprise storage 6	`2.3.15-150100.31.1`	Not reported	SUSE-SU-2022:2432-1	Not reported

[Debian bug #1016351]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[dovecot-auth-lua]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-core]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-dev]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-gssapi]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-imapd]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-ldap]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-lmtpd]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-lucene]Unknown
Source package: [dovecot]
Details (4)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-managesieved]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-mysql]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-pgsql]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-pop3d]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-sieve]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-solr]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-sqlite]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
[dovecot-submissiond]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2
  dsa · dovecot · debian · bookworm

Observed: Oct 23, 2026, 6:26:44 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]