Known vulnerabilities in dovecot-core (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
dovecot-core (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:dovecot-core_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1:2.4.4+dfsg1-2ubuntu5
1:2.2.35-2ubuntu1
1:2.3.2.1-1ubuntu1
1:2.3.2.1-1ubuntu2
1:2.3.2.1-1ubuntu3.1
1:2.3.2.1-1ubuntu3.2
1:2.3.2.1-1ubuntu3.3
1:2.2.33.2-1ubuntu1
1:2.2.33.2-1ubuntu2
1:2.2.33.2-1ubuntu3
1:2.2.33.2-1ubuntu4.1
1:2.2.33.2-1ubuntu4.2
1:2.2.33.2-1ubuntu4.3
1:2.2.33.2-1ubuntu4.4
1:2.2.33.2-1ubuntu4
1:2.3.7.2-1ubuntu1
1:2.3.7.2-1ubuntu2
1:2.3.7.2-1ubuntu3.1
1:2.3.7.2-1ubuntu3.5
1:2.3.2.1-1ubuntu3
1:2.3.2.1-1ubuntu4
1:2.3.3-1ubuntu1
1:2.3.4-2ubuntu1
1:2.3.4.1-1ubuntu1
1:2.3.4.1-1ubuntu2.2
1:2.3.4.1-1ubuntu2.3
1:2.3.4.1-1ubuntu2
1:2.3.4.1-1ubuntu2.1
1:2.3.4.1-1ubuntu3
1:2.3.4.1-5ubuntu1
1:2.3.4.1-5ubuntu2
1:2.2.27-3ubuntu1.2
1:2.2.27-3ubuntu1.3
1:2.2.27-3ubuntu1.4
1:2.2.27-3ubuntu1
1:2.2.25-1ubuntu1
1:2.2.25-1ubuntu2
1:2.2.27-2ubuntu1
1:2.2.27-2ubuntu2
1:2.3.7.2-1ubuntu3
1:2.3.7.2-1ubuntu4
1:2.3.10.1+dfsg1-2
1:2.3.10.1+dfsg1-2build1
1:2.3.11.3+dfsg1-1
1:2.3.11.3+dfsg1-2
1:2.3.11.3+dfsg1-2ubuntu1
1:2.3.13+dfsg1-1
1:2.3.13+dfsg1-1build1
1:2.3.13+dfsg1-1ubuntu1
1:2.3.13+dfsg1-1ubuntu2
1:2.2.22-1ubuntu4
1:2.2.24-1ubuntu1.1
1:2.2.24-1ubuntu1.2
1:2.2.24-1ubuntu1.3
1:2.2.24-1ubuntu1
1:2.1.7-7ubuntu2
1:2.1.7-7ubuntu3.1
1:2.3.13+dfsg1-1ubuntu3
1:2.3.16+dfsg1-3ubuntu1
1:2.3.16+dfsg1-3ubuntu2.2
1:2.3.16+dfsg1-3ubuntu2.5
1:2.3.16+dfsg1-3ubuntu2.6
1:2.3.16+dfsg1-3ubuntu2.7
1:2.3.16+dfsg1-3ubuntu2.8
1:2.3.16+dfsg1-3ubuntu2.9
1:2.3.16+dfsg1-3ubuntu2
1:2.3.16+dfsg1-3ubuntu3
1:2.3.16+dfsg1-3ubuntu4
1:2.3.19.1+dfsg1-2ubuntu2
1:2.3.19.1+dfsg1-2ubuntu3
1:2.1.7-7ubuntu1
1:2.1.7-1ubuntu1
1:2.1.7-1ubuntu2.1
1:2.1.7-1ubuntu2
1:2.3.21+dfsg1-2ubuntu1
1:2.3.21+dfsg1-2ubuntu2
1:2.3.21+dfsg1-2ubuntu3
1:2.3.21+dfsg1-2ubuntu6.1
1:2.3.21+dfsg1-2ubuntu6.2
1:2.3.21+dfsg1-2ubuntu6.3
1:2.3.21+dfsg1-2ubuntu6.4
1:2.3.21+dfsg1-2ubuntu6.5
1:2.3.21+dfsg1-2ubuntu5
1:2.3.21+dfsg1-3ubuntu1
1:2.3.19.1+dfsg1-2ubuntu4
1:2.3.19.1+dfsg1-2.1ubuntu1
1:2.3.20+dfsg1-1ubuntu1
1:2.3.20+dfsg1-1ubuntu2
1:2.3.20+dfsg1-1ubuntu3
1:2.0.15-1ubuntu1
1:2.0.15-1ubuntu2
1:2.0.15-1ubuntu3
1:2.0.15-1ubuntu4
1:2.0.15-1ubuntu5
1:2.0.19-0ubuntu2
1:2.0.19-0ubuntu2.1
1:2.0.19-0ubuntu2.2
1:2.0.19-0ubuntu2.8
1:2.0.19-0ubuntu1
1:2.3.21.1+dfsg1-1ubuntu2.1
1:2.4.1+dfsg1-5ubuntu5
1:2.4.2+dfsg1-3ubuntu1
1:2.4.2+dfsg1-3ubuntu2.1
1:2.4.2+dfsg1-3ubuntu2
1:2.4.1+dfsg1-5ubuntu2
1:2.4.1+dfsg1-5ubuntu3
1:2.4.1+dfsg1-5ubuntu4.1
1:2.4.1+dfsg1-5ubuntu4.2
1:2.2.18-2ubuntu2
1:2.2.22-1ubuntu1
1:2.2.22-1ubuntu3
1:2.2.22-1ubuntu2.1
1:2.2.22-1ubuntu2.2
1:2.2.22-1ubuntu2.3
1:2.2.22-1ubuntu2.4
1:2.2.22-1ubuntu2.6
1:2.2.22-1ubuntu2.7
1:2.2.22-1ubuntu2.8
1:2.2.22-1ubuntu2.9
1:2.2.22-1ubuntu2.10
1:2.2.22-1ubuntu2.11
1:2.2.22-1ubuntu2
1:2.2.9-1ubuntu3
1:2.2.9-1ubuntu4
1:2.2.9-1ubuntu5
1:2.1.7-7ubuntu3
1:2.2.9-1ubuntu1
1:2.2.9-1ubuntu2.1
1:2.2.9-1ubuntu2.3
1:2.2.9-1ubuntu2.4
1:2.2.9-1ubuntu2.5
1:2.2.9-1ubuntu2.6
1:2.2.9-1ubuntu2
1:2.4.1+dfsg1-5ubuntu4
1:2.4.1+dfsg1-5ubuntu1
1:2.3.21.1+dfsg1-1ubuntu2
1:2.3.21.1+dfsg1-1ubuntu1
1:2.2.9-1ubuntu2.6+esm3
1:2.3.7.2-1ubuntu3.2
1:2.3.7.2-1ubuntu3.7
1:2.3.16+dfsg1-3ubuntu2.4
1:2.3.21+dfsg1-2ubuntu6
1:2.3.7.2-1ubuntu3.6
1:2.3.13+dfsg1-1ubuntu3.1
1:2.3.16+dfsg1-3ubuntu2.1
1:2.2.33.2-1ubuntu4.8
1:2.3.7.2-1ubuntu3.4
1:2.3.11.3+dfsg1-2ubuntu0.2
1:2.3.13+dfsg1-1ubuntu1.1
1:2.3.7.2-1ubuntu3.3
1:2.3.11.3+dfsg1-2ubuntu0.1
1:2.2.9-1ubuntu2.6+esm4
1:2.2.33.2-1ubuntu4.7
1:2.2.22-1ubuntu2.14
1:2.2.33.2-1ubuntu4.6
1:2.2.22-1ubuntu2.13
1:2.3.4.1-5ubuntu3.1
2.3.7.2-1ubuntu3
2.3.4.1-5ubuntu3
2.2.33.2-1ubuntu4
2.2.33.2-1ubuntu4.5
2.2.22-1ubuntu2
2.2.22-1ubuntu2.12
2.2.9-1ubuntu2
2.2.9-1ubuntu2.6
2.0.19-0ubuntu2.2
2.0.19-0ubuntu2.1
2.0.19-0ubuntu1
1:2.3.4.1-5ubuntu3
1:2.3.2.1-1ubuntu3.4
1:2.2.33.2-1ubuntu4.5
1:2.2.22-1ubuntu2.12
1:2.3.4.1-1ubuntu2.4
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU96022 - Resource exhaustion CVE-2024-23184 |
CWE-400 | Medium | 1:2.3.7.2-1ubuntu3.7, 1:2.3.16+dfsg1-3ubuntu2.4, 1:2.3.21+dfsg1-2ubuntu6 | 14.08.2024 |
SB2024081482 SB2024081536 SB2024082002 and 11 more |
||
| #VU96021 - Resource exhaustion CVE-2024-23185 |
CWE-400 | Medium | 1:2.3.7.2-1ubuntu3.7, 1:2.3.16+dfsg1-3ubuntu2.4, 1:2.3.21+dfsg1-2ubuntu6 | 14.08.2024 |
SB2024081482 SB2024081536 SB2024082002 and 11 more |
||
| #VU65119 - Permissions, Privileges, and Access Controls CVE-2022-30550 |
CWE-264 | Medium | 1:2.2.33.2-1ubuntu4.8, 1:2.3.7.2-1ubuntu3.6, 1:2.3.13+dfsg1-1ubuntu3.1, 1:2.3.16+dfsg1-3ubuntu2.1 | 11.07.2022 |
SB2022071169 SB2022071171 SB2022071911 and 10 more |
||
| #VU54286 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2021-33515 |
CWE-74 | Medium | 1:2.3.7.2-1ubuntu3.4, 1:2.3.11.3+dfsg1-2ubuntu0.2, 1:2.3.13+dfsg1-1ubuntu1.1 | 21.06.2021 |
SB2021062107 SB2021062223 SB2021071801 and 12 more |
||
| #VU54285 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29157 |
CWE-22 | Low | 1:2.3.7.2-1ubuntu3.4, 1:2.3.11.3+dfsg1-2ubuntu0.2, 1:2.3.13+dfsg1-1ubuntu1.1 | 21.06.2021 |
SB2021062107 SB2021062223 SB2021071801 and 9 more |
||
| #VU49238 - Improper input validation CVE-2020-25275 |
CWE-20 | Medium | 1:2.2.9-1ubuntu2.6+esm4, 1:2.2.22-1ubuntu2.14, 1:2.2.33.2-1ubuntu4.7, 1:2.3.7.2-1ubuntu3.3, 1:2.3.11.3+dfsg1-2ubuntu0.1 | 04.01.2021 |
SB2021010411 SB2021010412 SB2021010418 and 9 more |
||
| #VU49237 - Exposure of sensitive information to an unauthorized actor CVE-2020-24386 |
CWE-200 | Medium | 1:2.2.22-1ubuntu2.14, 1:2.2.33.2-1ubuntu4.7, 1:2.3.7.2-1ubuntu3.3, 1:2.3.11.3+dfsg1-2ubuntu0.1 | 04.01.2021 |
SB2021010411 SB2021010412 SB2021010418 and 11 more |
||
| #VU45673 - Improper input validation CVE-2020-12674 |
CWE-20 | Medium | 1:2.2.9-1ubuntu2.6+esm3, 1:2.2.22-1ubuntu2.13, 1:2.2.33.2-1ubuntu4.6, 1:2.3.7.2-1ubuntu3.2 | 13.08.2020 |
SB2020081309 SB2020081310 SB2020082104 and 15 more |
||
| #VU45672 - Out-of-bounds read CVE-2020-12673 |
CWE-125 | Medium | 1:2.2.9-1ubuntu2.6+esm3, 1:2.2.22-1ubuntu2.13, 1:2.2.33.2-1ubuntu4.6, 1:2.3.7.2-1ubuntu3.2 | 13.08.2020 |
SB2020081309 SB2020081310 SB2020082104 and 15 more |
||
| #VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-12100 |
CWE-835 | Medium | 1:2.2.9-1ubuntu2.6+esm3, 1:2.2.22-1ubuntu2.13, 1:2.2.33.2-1ubuntu4.6, 1:2.3.7.2-1ubuntu3.2 | 13.08.2020 |
SB2020081309 SB2020081310 SB2020081917 and 16 more |
||
| #VU17374 - Authentication Bypass Issues CVE-2019-3814 |
CWE-592 | Medium | 1:2.2.9-1ubuntu2.5, 1:2.2.22-1ubuntu2.9, 1:2.2.33.2-1ubuntu4.2, 1:2.3.2.1-1ubuntu3.1 | 05.02.2019 |
SB2019020504 SB2019020615 SB2019020616 and 10 more |
||
| #VU32529 - Improper Authentication CVE-2014-3430 |
CWE-287 | Medium | 1:2.0.19-0ubuntu2.1, 1:2.1.7-1ubuntu2.1, 1:2.1.7-7ubuntu3.1, 1:2.2.9-1ubuntu2.1 | 14.05.2014 |
SB2014051401 SB2014061016 SB2014072302 and 2 more |