CVE catalog

CVE-2026-40020

Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no. This causes folders to be spammed to all users. The impact is limi

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.26% · Oct 25, 2026

Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no. This causes folders to be spammed to all users. The impact is limited to being able to spam folders to other users, no unexpected access is gained. Install to fixed version. No publicly available exploits are known.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandovecotsid1:2.4.5+dfsg1-4fixed
Debiandovecotforky1:2.4.5+dfsg1-4fixed
Debiandovecottrixie1:2.4.1+dfsg1-6+deb13u6fixed
Debiandovecottrixie-security1:2.4.1+dfsg1-6+deb13u7fixed
Debiandovecotbookworm1:2.3.19.1+dfsg1-2.1+deb12u6fixed
Debiandovecotbookworm-security1:2.3.19.1+dfsg1-2.1+deb12u6fixed
CpedovecotNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-auth-luaNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-coreNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-devNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-gssapiNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-imapdNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-ldapNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-lmtpdNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-managesievedNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-mysqlNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-pgsqlNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-pop3dNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-sieveNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-solrNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-sqliteNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
Cpedovecot-submissiondNot reported1:2.3.21+dfsg1-2ubuntu6.5fixed
CpedovecotNot reported2.4.4fixed
CpedovecotNot reported3.1.5fixed
CpedovecotNot reported1:2.3.19.1+dfsg1-2.1+deb12u6fixed
Alpinedovecot3.232.4.4-r0fixed
Alpinedovecot3.242.4.4-r0fixed
Ubuntudovecotpro1:2.1.7-7ubuntu3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.4vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.5vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm4vulnerable
Ubuntudovecot16.041:2.2.18-2ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.3vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.4vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.6vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.7vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.8vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.9vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.10vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.11vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.12vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.13vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.14vulnerable
Ubuntudovecot18.041:2.2.27-3ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.5vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.6vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.7vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.8vulnerable
Ubuntudovecot20.041:2.3.4.1-5ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.4vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.5vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.6vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.7vulnerable
Ubuntudovecot22.041:2.3.13+dfsg1-1ubuntu3vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.4vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.6vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.7vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.8vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.9fixed
Ubuntudovecot24.041:2.3.20+dfsg1-1ubuntu3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu5vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.5fixed
Ubuntudovecot25.101:2.3.21.1+dfsg1-1ubuntu2vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu1vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu3vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu4vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu4.1vulnerable
Ubuntudovecot25.101:2.4.1+dfsg1-5ubuntu4.2fixed
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu4vulnerable
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu5vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu1vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2.1fixed
CpedovecotNot reported3.1.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandovecotsourcesid1:2.4.4+dfsg1-1not yet assignedNot reported[1136444]
Debiandovecotsourceforky1:2.4.4+dfsg1-1not yet assignedNot reported[1136444]
Debiandovecotsourcetrixie1:2.4.1+dfsg1-6+deb13u6not yet assignedNot reported[1136444]
Debiandovecotsourcebookworm1:2.3.19.1+dfsg1-2.1+deb12u6not yet assignedNot reported[1136444]
CpedovecotcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-auth-luacpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-corecpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-devcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-gssapicpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-imapdcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-ldapcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-lmtpdcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-managesievedcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-mysqlcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-pgsqlcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-pop3dcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-sievecpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-solrcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-sqlitecpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
Cpedovecot-submissiondcpeNot reported1:2.3.21+dfsg1-2ubuntu6.5Not reportedNot reportedNot reported
CpedovecotcpeNot reported2.4.4Not reportedNot reportedNot reported
CpedovecotcpeNot reported3.1.5Not reportedNot reportedNot reported
CpedovecotcpeNot reported1:2.3.19.1+dfsg1-2.1+deb12u6Not reportedNot reportedNot reported
Alpinedovecotapk3.232.4.4-r0Not reportedALPINE-CVE-2026-40020Not reported
Alpinedovecotapk3.242.4.4-r0Not reportedALPINE-CVE-2026-40020Not reported
Ubuntudovecotdeb22.041:2.3.16+dfsg1-3ubuntu2.9Not reportedUBUNTU-CVE-2026-40020Not reported
Ubuntudovecotdeb24.041:2.3.21+dfsg1-2ubuntu6.5Not reportedUBUNTU-CVE-2026-40020Not reported
Ubuntudovecotdeb25.101:2.4.1+dfsg1-5ubuntu4.2Not reportedUBUNTU-CVE-2026-40020Not reported
Ubuntudovecotdeb26.041:2.4.2+dfsg1-3ubuntu2.1Not reportedUBUNTU-CVE-2026-40020Not reported
CpedovecotcpeNot reported3.1.5Not reportedNVD-CVE-2026-40020Not reported

[Debian bug #1136444]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dovecot-auth-lua]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-core]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-dev]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-gssapi]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-imapd]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-ldap]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-lmtpd]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-lucene]Fixed

    Source package: [dovecot]

    Details (4)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-managesieved]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-mysql]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-pgsql]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-pop3d]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-sieve]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-solr]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-sqlite]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-submissiond]Fixed

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.19.1+dfsg1-2.1+deb12u6

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

[Debian 13 (Trixie)]

  • [dovecot-auth-lua]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

  • [dovecot-core]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

  • [dovecot-dev]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

  • [dovecot-flatcurve]Fixed

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u6

      nvd · dovecot · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]