Known vulnerabilities in dovecot (Alpine package)

Software CPE: cpe:2.3:o:alpine:dovecot_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dovecot (Alpine package) dovecot (Alpine package) is affected by 22 known vulnerabilities: 2 high, 19 medium, 1 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49238 - Improper input validation
CVE-2020-25275
CWE-20 Medium
No
No
2.3.13-r0 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 9 more
#VU49237 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24386
CWE-200 Medium
No
No
2.3.13-r0 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 11 more
#VU45673 - Improper input validation
CVE-2020-12674
CWE-20 Medium
No
No
- 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45672 - Out-of-bounds read
CVE-2020-12673
CWE-125 Medium
No
No
- 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12100
CWE-835 Medium
No
No
- 13.08.2020 SB2020081309
SB2020081310
SB2020081917
and 16 more
#VU27984 - Improper input validation
CVE-2020-10967
CWE-20 Medium
No
No
2.3.10.1-r0 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 11 more
#VU27983 - Use After Free
CVE-2020-10958
CWE-416 Medium
No
No
2.3.10.1-r0 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 8 more
#VU27981 - NULL Pointer Dereference
CVE-2020-10957
CWE-476 Medium
No
No
2.3.10.1-r0 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 8 more
#VU25340 - Improper input validation
CVE-2020-7957
CWE-20 Medium
No
No
2.3.9.3-r0, 2.3.10.1-r0 13.02.2020 SB2020021338
SB2020021339
SB2020021232
and 2 more
#VU25339 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-7046
CWE-835 High
No
No
2.3.9.3-r0, 2.3.10.1-r0 13.02.2020 SB2020021338
SB2020021339
SB2020021231
and 2 more
#VU23598 - NULL Pointer Dereference
CVE-2019-19722
CWE-476 Medium
No
No
2.3.9.2-r0 13.12.2019 SB2019121310
SB2019121628
SB2019123010
and 1 more
#VU20432 - Out-of-bounds write
CVE-2019-11500
CWE-787 High
No
No
2.2.36.4-r0 28.08.2019 SB2019082801
SB2019082802
SB2019082803
and 15 more
#VU18400 - Resource Management Errors
CVE-2019-11499
CWE-399 Medium
No
No
2.3.6-r0 06.05.2019 SB2019050101
SB2019050602
SB2019043004
and 6 more
#VU18399 - NULL Pointer Dereference
CVE-2019-11494
CWE-476 Medium
No
No
2.3.6-r0 06.05.2019 SB2019050101
SB2019050602
SB2019043004
and 6 more
#VU18307 - Improper input validation
CVE-2019-10691
CWE-20 Medium
No
No
2.3.6-r0 18.04.2019 SB2019041811
SB2019041820
SB2019042403
and 4 more
#VU18089 - Stack-based buffer overflow
CVE-2019-7524
CWE-121 Low
No
No
2.2.36.3-r0 28.03.2019 SB2019032801
SB2019032901
SB2019040102
and 10 more
#VU17374 - Authentication Bypass Issues
CVE-2019-3814
CWE-592 Medium
No
No
2.2.36.1-r0 05.02.2019 SB2019020504
SB2019020615
SB2019020616
and 9 more
#VU11218 - Resource exhaustion
CVE-2017-15130
CWE-400 Medium
No
No
2.2.34-r0 06.03.2018 SB2018030510
SB2018030607
SB2018030301
and 5 more
#VU10838 - Out-of-bounds read
CVE-2017-14461
CWE-125 Medium
No
No
2.2.34-r0 02.03.2018 SB2018022807
SB2018030510
SB2018030607
and 5 more
#VU10346 - Missing release of memory after effective lifetime
CVE-2017-15132
CWE-401 Medium
No
No
2.2.34-r0 01.02.2018 SB2018020111
SB2018020123
SB2018020125
and 6 more


Showing elements 1 - 20 out of 22