CVE catalog

CVE-2026-40205

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.21% · Oct 25, 2026

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly requires all of them. The configured authorization policy is not enforced, so a token that was granted only part of the required permissions is accepted where it should have been rejected. Use local token validation where tokens can be validated locally. Update to non-vulnerable version. No publicly available exploits are known.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandovecotsid1:2.4.5+dfsg1-4fixed
Debiandovecotforky1:2.4.5+dfsg1-4fixed
Debiandovecottrixie1:2.4.1+dfsg1-6+deb13u6vulnerable
Debiandovecottrixie-security1:2.4.1+dfsg1-6+deb13u7fixed
Debiandovecotbookworm1:2.3.19.1+dfsg1-2.1+deb12u6vulnerable
Debiandovecotbookworm-security1:2.3.19.1+dfsg1-2.1+deb12u6vulnerable
Alpinedovecot3.232.4.5-r0fixed
Alpinedovecot3.242.4.5-r0fixed
Ubuntudovecotpro1:2.1.7-7ubuntu3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.4vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.5vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm4vulnerable
Ubuntudovecot16.041:2.2.18-2ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.3vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.4vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.6vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.7vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.8vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.9vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.10vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.11vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.12vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.13vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.14vulnerable
Ubuntudovecot18.041:2.2.27-3ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.5vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.6vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.7vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.8vulnerable
Ubuntudovecot20.041:2.3.4.1-5ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.4vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.5vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.6vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.7vulnerable
Ubuntudovecot22.041:2.3.13+dfsg1-1ubuntu3vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.4vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.6vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.7vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.8vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.9vulnerable
Ubuntudovecot24.041:2.3.20+dfsg1-1ubuntu3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu5vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.5vulnerable
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu4vulnerable
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu5vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu1vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandovecotsourcesid1:2.4.5+dfsg1-1not yet assignedNot reported[1146018]
Debiandovecotsourceforky1:2.4.5+dfsg1-1not yet assignedNot reported[1146018]
Debiandovecotsourcetrixie1:2.4.1+dfsg1-6+deb13u7not yet assignedNot reported[1146018]
Debiandovecotsourcebookworm(unfixed)not yet assignedNot reported[1146018]
Alpinedovecotapk3.232.4.5-r0Not reportedALPINE-CVE-2026-40205Not reported
Alpinedovecotapk3.242.4.5-r0Not reportedALPINE-CVE-2026-40205Not reported

[Debian bug #1146018]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dovecot-auth-lua]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-core]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-dev]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-gssapi]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-imapd]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-ldap]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-lmtpd]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-lucene]Affected

    Source package: [dovecot]

    Details (4)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-managesieved]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-mysql]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-pgsql]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-pop3d]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-sieve]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-solr]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-sqlite]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

  • [dovecot-submissiond]Affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Affected

      nvd · dovecot · debian · bookworm; nvd · dovecot · debian · 12

[Debian 13 (Trixie)]

  • [dovecot-auth-lua]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-core]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-dev]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-flatcurve]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]