CVE catalog

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents

[CVE catalog]

Severity
Medium · CVSS 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 25, 2026

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non-vulnerable version. No publicly available exploits are known.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandovecotsid1:2.4.5+dfsg1-4fixed
Debiandovecotforky1:2.4.5+dfsg1-4fixed
Debiandovecottrixie1:2.4.1+dfsg1-6+deb13u6vulnerable
Debiandovecottrixie-security1:2.4.1+dfsg1-6+deb13u7fixed
Debiandovecotbookworm1:2.3.19.1+dfsg1-2.1+deb12u6not affected
Debiandovecotbookworm-security1:2.3.19.1+dfsg1-2.1+deb12u6not affected
Alpinedovecot3.232.4.5-r0fixed
Alpinedovecot3.242.4.5-r0fixed
Ubuntudovecotpro1:2.1.7-7ubuntu3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.4vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.5vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm1vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm2vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm3vulnerable
Ubuntudovecotpro1:2.2.9-1ubuntu2.6+esm4vulnerable
Ubuntudovecot16.041:2.2.18-2ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.1vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.2vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.3vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.4vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.6vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.7vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.8vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.9vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.10vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.11vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.12vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.13vulnerable
Ubuntudovecot16.041:2.2.22-1ubuntu2.14vulnerable
Ubuntudovecot18.041:2.2.27-3ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.1vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.2vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.3vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.4vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.5vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.6vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.7vulnerable
Ubuntudovecot18.041:2.2.33.2-1ubuntu4.8vulnerable
Ubuntudovecot20.041:2.3.4.1-5ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.1vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.2vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.3vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.4vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.5vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.6vulnerable
Ubuntudovecot20.041:2.3.7.2-1ubuntu3.7vulnerable
Ubuntudovecot22.041:2.3.13+dfsg1-1ubuntu3vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.1vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.2vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.4vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.6vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.7vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.8vulnerable
Ubuntudovecot22.041:2.3.16+dfsg1-3ubuntu2.9vulnerable
Ubuntudovecot24.041:2.3.20+dfsg1-1ubuntu3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu5vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.1vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.2vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.3vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.4vulnerable
Ubuntudovecot24.041:2.3.21+dfsg1-2ubuntu6.5vulnerable
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu4vulnerable
Ubuntudovecot26.041:2.4.1+dfsg1-5ubuntu5vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu1vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2vulnerable
Ubuntudovecot26.041:2.4.2+dfsg1-3ubuntu2.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandovecotsourcesid1:2.4.5+dfsg1-1not yet assignedNot reported[1146018]
Debiandovecotsourceforky1:2.4.5+dfsg1-1not yet assignedNot reported[1146018]
Debiandovecotsourcetrixie1:2.4.1+dfsg1-6+deb13u7not yet assignedNot reported[1146018]
DebiandovecotsourcebookwormNot affectedunimportantNot reported[1146018]
Alpinedovecotapk3.232.4.5-r0Not reportedALPINE-CVE-2026-42392Not reported
Alpinedovecotapk3.242.4.5-r0Not reportedALPINE-CVE-2026-42392Not reported

[Debian bug #1146018]

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [dovecot-auth-lua]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-core]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-dev]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-flatcurve]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-gssapi]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-imapd]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-ldap]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-lmtpd]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-managesieved]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-mysql]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-pgsql]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-pop3d]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-sieve]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-solr]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-sqlite]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

  • [dovecot-submissiond]Affected

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Affected · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.4.1+dfsg1-6+deb13u7

      nvd · dovecot · debian · 13

[Debian 12 (Bookworm)]

  • [dovecot-auth-lua]Not affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

  • [dovecot-core]Not affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

  • [dovecot-dev]Not affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

  • [dovecot-gssapi]Not affected

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Not affected

      nvd · dovecot · debian · bookworm

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]