CVE catalog

CVE-2025-59028

Severity: Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published: Jan 1, 2025, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.46% · Oct 25, 2026

When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes (heavy perfomance penalty on large deployments). No publicly available exploits are known.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	dovecot	sid	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	forky	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	trixie	`1:2.4.1+dfsg1-6+deb13u6`	fixed
Debian	dovecot	trixie-security	`1:2.4.1+dfsg1-6+deb13u7`	fixed
Debian	dovecot	bookworm	`1:2.3.19.1+dfsg1-2.1+deb12u6`	not affected
Debian	dovecot	bookworm-security	`1:2.3.19.1+dfsg1-2.1+deb12u6`	not affected
Cpe	dovecot	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-auth-lua	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-core	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-dev	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-gssapi	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-imapd	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-ldap	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-lmtpd	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-managesieved	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-mysql	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-pgsql	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-pop3d	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-sieve	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-solr	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-sqlite	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot-submissiond	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Cpe	dovecot	Not reported	`2.4.3`	fixed
Cpe	dovecot	Not reported	`3.1.2`	fixed
Cpe	dovecot	Not reported	Not reported	not affected
Cpe	dovecot	Not reported	`3.1.2`	fixed
Alpine	dovecot	3.23	`2.4.3-r0`	fixed
Alpine	dovecot	3.24	`2.4.3-r0`	fixed
Ubuntu	dovecot	22.04	`1:2.3.13+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.4`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.6`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.7`	fixed
Ubuntu	dovecot	24.04	`1:2.3.20+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu1`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu2`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu4`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu5`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.1`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.2`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.3`	fixed
Ubuntu	dovecot	25.10	`1:2.3.21.1+dfsg1-1ubuntu2`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu1`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu3`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4.1`	fixed
Ubuntu	dovecot	25.10	`1:2.3.21.1+dfsg1-1ubuntu2`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu1`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu3`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4.1`	fixed
Opensuse	dovecot24	leap 16.0	`2.4.3-160000.1.1`	fixed
Suse	dovecot24	linux enterprise server 16.0	`2.4.3-160000.1.1`	fixed
Suse	dovecot24	linux enterprise server for sap applications 16.0	`2.4.3-160000.1.1`	fixed
Opensuse	dovecot24	tumbleweed	`2.4.3-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	dovecot	source	sid	`1:2.4.3+dfsg1-1`	not yet assigned	Not reported	Not reported
Debian	dovecot	source	forky	`1:2.4.3+dfsg1-1`	not yet assigned	Not reported	Not reported
Debian	dovecot	source	trixie	`1:2.4.1+dfsg1-6+deb13u4`	not yet assigned	Not reported	Not reported
Debian	dovecot	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Cpe	dovecot	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-auth-lua	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-core	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-dev	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-gssapi	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-imapd	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-ldap	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-lmtpd	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-managesieved	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-mysql	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-pgsql	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-pop3d	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-sieve	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-solr	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-sqlite	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot-submissiond	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	Not reported	Not reported
Cpe	dovecot	cpe	Not reported	`2.4.3`	Not reported	Not reported	Not reported
Cpe	dovecot	cpe	Not reported	`3.1.2`	Not reported	Not reported	Not reported
Cpe	dovecot	cpe	Not reported	`3.1.2`	Not reported	NVD-CVE-2025-59028	Not reported
Alpine	dovecot	apk	3.23	`2.4.3-r0`	Not reported	ALPINE-CVE-2025-59028	Not reported
Alpine	dovecot	apk	3.24	`2.4.3-r0`	Not reported	ALPINE-CVE-2025-59028	Not reported
Ubuntu	dovecot	deb	22.04	`1:2.3.16+dfsg1-3ubuntu2.7`	Not reported	USN-8136-1	Not reported
Ubuntu	dovecot	deb	24.04	`1:2.3.21+dfsg1-2ubuntu6.3`	Not reported	USN-8136-1	Not reported
Ubuntu	dovecot	deb	25.10	`1:2.4.1+dfsg1-5ubuntu4.1`	Not reported	USN-8136-1	Not reported
Ubuntu	dovecot	deb	25.10	`1:2.4.1+dfsg1-5ubuntu4.1`	Not reported	UBUNTU-CVE-2025-59028	Not reported
Opensuse	dovecot24	rpm	leap 16.0	`2.4.3-160000.1.1`	Not reported	OPENSUSE-SU-2026:20554-1	Not reported
Suse	dovecot24	rpm	linux enterprise server 16.0	`2.4.3-160000.1.1`	Not reported	SUSE-SU-2026:21208-1	Not reported
Suse	dovecot24	rpm	linux enterprise server for sap applications 16.0	`2.4.3-160000.1.1`	Not reported	SUSE-SU-2026:21208-1	Not reported
Opensuse	dovecot24	rpm	tumbleweed	`2.4.3-1.1`	Not reported	OPENSUSE-SU-2026:10442-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[dovecot24-backend-mysql]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.3-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-backend-pgsql]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.3-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-backend-sqlite]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.3-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-devel]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.3-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-fts]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.3-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-fts-flatcurve]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.3-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-fts-solr]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.3-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[dovecot-auth-lua]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-core]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-dev]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-gssapi]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-imapd]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-ldap]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-lmtpd]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-lucene]Not affected
Source package: [dovecot]
Details (4)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-managesieved]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-mysql]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-pgsql]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-pop3d]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-sieve]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm

Next results

Observed: Oct 27, 2026, 6:39:12 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]