CVE catalog

CVE-2024-23185

Dovecot vulnerabilities

Severity: Medium · CVSS 6.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Published: Aug 15, 2024, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.29% · Oct 25, 2026

A security issue was found in Dovecot. Very large headers can lead to resource exhaustion when parsing messages. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to the message-header-parser, it starts building up a "full_value" buffer out of the smaller chunks. The full_value buffer has no size limit so large headers can cause large memory usage. This issue occurs whether it is a single long header line or a single header split into multiple lines. dovecot: very large headers can cause resource exhaustion when parsing message This vulnerability is considered moderate rather than important because, while it can lead to resource exhaustion through unbounded memory allocation, its exploitability is limited by several factors. Incoming mail typically passes through an MTA that enforces size limits, significantly reducing the likelihood of an external attacker successfully exploiting the issue. Additionally, the potential for a user to cause a denial-of-service (DoS) attack on themselves by appending large emails is largely self-contained, affecting only the user's session and not posing a broader systemic risk. As a result, the overall impact is mitigated, making it a moderate severity issue. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	dovecot	sid	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	forky	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	trixie	`1:2.4.1+dfsg1-6+deb13u6`	fixed
Debian	dovecot	trixie-security	`1:2.4.1+dfsg1-6+deb13u7`	fixed
Debian	dovecot	bookworm	`1:2.3.19.1+dfsg1-2.1+deb12u6`	fixed
Debian	dovecot	bookworm-security	`1:2.3.19.1+dfsg1-2.1+deb12u6`	fixed
Ubuntu	dovecot	noble	`1:2.3.19.1+dfsg1-2.1+deb12u1`	fixed
Ubuntu	dovecot	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-auth-lua	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-core	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-dev	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-gssapi	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-imapd	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-ldap	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-lmtpd	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-managesieved	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-mysql	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-pgsql	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-pop3d	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-sieve	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-solr	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-sqlite	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Ubuntu	dovecot-submissiond	noble	`1:2.3.21+dfsg1-2ubuntu6`	fixed
Alpine	dovecot	3.21	`2.3.21.1-r0`	fixed
Alpine	dovecot	3.22	`2.3.21.1-r0`	fixed
Alpine	dovecot	3.23	`2.3.21.1-r0`	fixed
Alpine	dovecot	3.24	`2.3.21.1-r0`	fixed
Ubuntu	dovecot	pro	`1:2.1.7-7ubuntu3`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu1`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.1`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.3`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.4`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.5`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm1`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm2`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm3`	vulnerable
Ubuntu	dovecot	pro	`1:2.2.9-1ubuntu2.6+esm4`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.18-2ubuntu2`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu1`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.1`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.2`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.3`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.4`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.6`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.7`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.8`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.9`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.10`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.11`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.12`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.13`	vulnerable
Ubuntu	dovecot	16.04	`1:2.2.22-1ubuntu2.14`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.27-3ubuntu1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu2`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu3`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.1`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.2`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.3`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.4`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.5`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.6`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.7`	vulnerable
Ubuntu	dovecot	18.04	`1:2.2.33.2-1ubuntu4.8`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.4.1-5ubuntu3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu1`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu2`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.1`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.2`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.3`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.4`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.5`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.6`	vulnerable
Ubuntu	dovecot	20.04	`1:2.3.7.2-1ubuntu3.7`	fixed
Ubuntu	dovecot	22.04	`1:2.3.13+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.4`	fixed
Ubuntu	dovecot	24.04	`1:2.3.20+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu1`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu2`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu4`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu5`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	dovecot	source	sid	`1:2.3.21.1+dfsg1-1`	not yet assigned	Not reported	[1078877]
Debian	dovecot	source	forky	`1:2.3.21.1+dfsg1-1`	not yet assigned	Not reported	[1078877]
Debian	dovecot	source	trixie	`1:2.3.21.1+dfsg1-1`	not yet assigned	Not reported	[1078877]
Debian	dovecot	source	bookworm	`1:2.3.19.1+dfsg1-2.1+deb12u1`	not yet assigned	Not reported	[1078877]
Ubuntu	dovecot	deb	noble	`1:2.3.19.1+dfsg1-2.1+deb12u1`	Not reported	Not reported	Not reported
Ubuntu	dovecot	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-auth-lua	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-core	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-dev	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-gssapi	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-imapd	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-ldap	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-lmtpd	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-managesieved	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-mysql	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-pgsql	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-pop3d	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-sieve	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-solr	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-sqlite	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Ubuntu	dovecot-submissiond	deb	noble	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	Not reported	Not reported
Alpine	dovecot	apk	3.21	`2.3.21.1-r0`	Not reported	ALPINE-CVE-2024-23185	Not reported
Alpine	dovecot	apk	3.22	`2.3.21.1-r0`	Not reported	ALPINE-CVE-2024-23185	Not reported
Alpine	dovecot	apk	3.23	`2.3.21.1-r0`	Not reported	ALPINE-CVE-2024-23185	Not reported
Alpine	dovecot	apk	3.24	`2.3.21.1-r0`	Not reported	ALPINE-CVE-2024-23185	Not reported
Ubuntu	dovecot	deb	20.04	`1:2.3.7.2-1ubuntu3.7`	Not reported	UBUNTU-CVE-2024-23185	Not reported
Ubuntu	dovecot	deb	22.04	`1:2.3.16+dfsg1-3ubuntu2.4`	Not reported	UBUNTU-CVE-2024-23185	Not reported
Ubuntu	dovecot	deb	24.04	`1:2.3.21+dfsg1-2ubuntu6`	Not reported	UBUNTU-CVE-2024-23185	Not reported

[Debian bug #1078877]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[dovecot-auth-lua]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-core]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-dev]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-gssapi]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-imapd]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-ldap]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-lmtpd]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-lucene]Unknown
Source package: [dovecot]
Details (4)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-managesieved]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-mysql]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-pgsql]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-pop3d]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-sieve]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-solr]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-sqlite]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
[dovecot-submissiond]Unknown
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u1
  usn · dovecot · debian · bookworm; usn · dovecot · debian · 12

[Debian 13 (Trixie)]

[dovecot-auth-lua]Unknown
Source package: [dovecot]
Details (5)
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
[dovecot-core]Unknown
Source package: [dovecot]
Details (5)
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
[dovecot-dev]Unknown
Source package: [dovecot]
Details (5)
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
[dovecot-flatcurve]Unknown
Source package: [dovecot]
Details (5)
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13
- 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 1:2.3.21.1+dfsg1-1
  usn · dovecot · debian · 13

Next results

Observed: Oct 27, 2026, 2:31:56 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]