Known vulnerabilities in dovecot-core (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:dovecot-core_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dovecot-core (Ubuntu package) dovecot-core (Ubuntu package) is affected by 12 known vulnerabilities: 11 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96022 - Resource exhaustion
CVE-2024-23184
CWE-400 Medium
No
No
1:2.3.7.2-1ubuntu3.7, 1:2.3.16+dfsg1-3ubuntu2.4, 1:2.3.21+dfsg1-2ubuntu6 14.08.2024 SB2024081482
SB2024081536
SB2024082002
and 11 more
#VU96021 - Resource exhaustion
CVE-2024-23185
CWE-400 Medium
No
No
1:2.3.7.2-1ubuntu3.7, 1:2.3.16+dfsg1-3ubuntu2.4, 1:2.3.21+dfsg1-2ubuntu6 14.08.2024 SB2024081482
SB2024081536
SB2024082002
and 11 more
#VU65119 - Permissions, Privileges, and Access Controls
CVE-2022-30550
CWE-264 Medium
No
No
1:2.2.33.2-1ubuntu4.8, 1:2.3.7.2-1ubuntu3.6, 1:2.3.13+dfsg1-1ubuntu3.1, 1:2.3.16+dfsg1-3ubuntu2.1 11.07.2022 SB2022071169
SB2022071171
SB2022071911
and 10 more
#VU54286 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-33515
CWE-74 Medium
No
No
1:2.3.7.2-1ubuntu3.4, 1:2.3.11.3+dfsg1-2ubuntu0.2, 1:2.3.13+dfsg1-1ubuntu1.1 21.06.2021 SB2021062107
SB2021062223
SB2021071801
and 12 more
#VU54285 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29157
CWE-22 Low
No
No
1:2.3.7.2-1ubuntu3.4, 1:2.3.11.3+dfsg1-2ubuntu0.2, 1:2.3.13+dfsg1-1ubuntu1.1 21.06.2021 SB2021062107
SB2021062223
SB2021071801
and 9 more
#VU49238 - Improper input validation
CVE-2020-25275
CWE-20 Medium
No
No
1:2.2.9-1ubuntu2.6+esm4, 1:2.2.22-1ubuntu2.14, 1:2.2.33.2-1ubuntu4.7, 1:2.3.7.2-1ubuntu3.3, 1:2.3.11.3+dfsg1-2ubuntu0.1 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 9 more
#VU49237 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24386
CWE-200 Medium
No
No
1:2.2.22-1ubuntu2.14, 1:2.2.33.2-1ubuntu4.7, 1:2.3.7.2-1ubuntu3.3, 1:2.3.11.3+dfsg1-2ubuntu0.1 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 11 more
#VU45673 - Improper input validation
CVE-2020-12674
CWE-20 Medium
No
No
1:2.2.9-1ubuntu2.6+esm3, 1:2.2.22-1ubuntu2.13, 1:2.2.33.2-1ubuntu4.6, 1:2.3.7.2-1ubuntu3.2 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45672 - Out-of-bounds read
CVE-2020-12673
CWE-125 Medium
No
No
1:2.2.9-1ubuntu2.6+esm3, 1:2.2.22-1ubuntu2.13, 1:2.2.33.2-1ubuntu4.6, 1:2.3.7.2-1ubuntu3.2 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12100
CWE-835 Medium
No
No
1:2.2.9-1ubuntu2.6+esm3, 1:2.2.22-1ubuntu2.13, 1:2.2.33.2-1ubuntu4.6, 1:2.3.7.2-1ubuntu3.2 13.08.2020 SB2020081309
SB2020081310
SB2020081917
and 16 more
#VU17374 - Authentication Bypass Issues
CVE-2019-3814
CWE-592 Medium
No
No
1:2.2.9-1ubuntu2.5, 1:2.2.22-1ubuntu2.9, 1:2.2.33.2-1ubuntu4.2, 1:2.3.2.1-1ubuntu3.1 05.02.2019 SB2019020504
SB2019020615
SB2019020616
and 10 more
#VU32529 - Improper Authentication
CVE-2014-3430
CWE-287 Medium
No
No
1:2.0.19-0ubuntu2.1, 1:2.1.7-1ubuntu2.1, 1:2.1.7-7ubuntu3.1, 1:2.2.9-1ubuntu2.1 14.05.2014 SB2014051401
SB2014061016
SB2014072302
and 2 more