CVE catalog

CVE-2026-33603

Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself between Dovecot and the cl

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.21% · Oct 25, 2026

Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself between Dovecot and the client connection. If successful, the attacker can eavesdrop communications between Dovecot and client as MITM proxy. Install fixed version. No publicly available exploits are known.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandovecotsid1:2.4.5+dfsg1-4fixed
Debiandovecotforky1:2.4.5+dfsg1-4fixed
Debiandovecottrixie1:2.4.1+dfsg1-6+deb13u6fixed
Debiandovecottrixie-security1:2.4.1+dfsg1-6+deb13u7fixed
Debiandovecotbookworm1:2.3.19.1+dfsg1-2.1+deb12u6fixed
Debiandovecotbookworm-security1:2.3.19.1+dfsg1-2.1+deb12u6fixed
CpedovecotNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-auth-luaNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-coreNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-devNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-gssapiNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-imapdNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-ldapNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-lmtpdNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-managesievedNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-mysqlNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-pgsqlNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-pop3dNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-sieveNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-solrNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-sqliteNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-submissiondNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
CpedovecotNot reported2.4.4fixed
CpedovecotNot reported3.1.5fixed
CpedovecotNot reported1:2.3.19.1+dfsg1-2.1+deb12u6fixed
Alpinedovecot3.232.4.4-r0fixed
Alpinedovecot3.242.4.4-r0fixed
Susedovecot22linux enterprise server 12 sp5-ltss2.2.31-19.37.2fixed
Susedovecot22linux enterprise server ltss extended security 12 sp52.2.31-19.37.2fixed
Ubuntudovecotpro1:2.1.7-7ubuntu3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.4vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.5vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm4vulnerable
Ubuntudovecot16.041:2.2.18-2ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.3vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.4vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.6vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.7vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.8vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.9vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.10vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.11vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.12vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.13vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.14vulnerable
Ubuntudovecot18.041:2.2.27-3ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.5vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.6vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.7vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.8vulnerable
Ubuntudovecot20.041:2.3.4.1-5ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.4vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.5vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.6vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.7vulnerable
Ubuntudovecot22.041:2.3.13+dfsg1-1ubuntu3vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.4vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.6vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.7vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.8vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.9fixed
Ubuntudovecot24.041:2.3.20+dfsg1-1ubuntu3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu5vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.5fixed
Ubuntudovecot25.101:2.3.21.1+dfsg1-1ubuntu2vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu1vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu3vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu4vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu4.1vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu4.2fixed
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu4vulnerable
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu5vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu1vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2.1fixed
CpedovecotNot reported3.1.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandovecotsourcesid1:2.4.4+dfsg1-1not yet assignedNot reported[1136444]
Debiandovecotsourceforky1:2.4.4+dfsg1-1not yet assignedNot reported[1136444]
Debiandovecotsourcetrixie1:2.4.1+dfsg1-6+deb13u6not yet assignedNot reported[1136444]
Debiandovecotsourcebookworm1:2.3.19.1+dfsg1-2.1+deb12u6not yet assignedNot reported[1136444]
CpedovecotcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-auth-luacpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-corecpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-devcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-gssapicpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-imapdcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-ldapcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-lmtpdcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-managesievedcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-mysqlcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-pgsqlcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-pop3dcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-sievecpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-solrcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-sqlitecpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-submissiondcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
CpedovecotcpeNot reported2.4.4Not reportedNot reportedNot reported
CpedovecotcpeNot reported3.1.5Not reportedNot reportedNot reported
CpedovecotcpeNot reported1:2.3.19.1+dfsg1-2.1+deb12u6Not reportedNot reportedNot reported
Alpinedovecotapk3.232.4.4-r0Not reportedALPINE-CVE-2026-33603Not reported
Alpinedovecotapk3.242.4.4-r0Not reportedALPINE-CVE-2026-33603Not reported
Susedovecot22rpmlinux enterprise server 12 sp5-ltss2.2.31-19.37.2Not reportedSUSE-SU-2026:2645-1Not reported
Susedovecot22rpmlinux enterprise server ltss extended security 12 sp52.2.31-19.37.2Not reportedSUSE-SU-2026:2645-1Not reported
Ubuntudovecotdeb22.041:2.3.16+dfsg1-3ubuntu2.9Not reportedUBUNTU-CVE-2026-33603Not reported
Ubuntudovecotdeb24.041:2.3.21+dfsg1-2ubuntu6.5Not reportedUBUNTU-CVE-2026-33603Not reported
Ubuntudovecotdeb25.101:2.4.1+dfsg1-5ubuntu4.2Not reportedUBUNTU-CVE-2026-33603Not reported
Ubuntudovecotdeb26.041:2.4.2+dfsg1-3ubuntu2.1Not reportedUBUNTU-CVE-2026-33603Not reported
CpedovecotcpeNot reported3.1.5Not reportedNVD-CVE-2026-33603Not reported

[Debian bug #1136444]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dovecot-auth-lua]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-core]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-dev]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-gssapi]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-imapd]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-ldap]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-lmtpd]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-lucene]Fixed

    Source package: [dovecot]

    Details (4)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-managesieved]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-mysql]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-pgsql]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-pop3d]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-sieve]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-solr]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-sqlite]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-submissiond]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

[Debian 13 (Trixie)]

  • [dovecot-auth-lua]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

  • [dovecot-core]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

  • [dovecot-dev]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

  • [dovecot-flatcurve]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]