Known vulnerabilities in dovecot (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:dovecot_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dovecot (Ubuntu package) dovecot (Ubuntu package) is affected by 25 known vulnerabilities: 2 high, 17 medium, 6 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131865 - Improper Handling of Extra Parameters
CVE-2026-27851
CWE-235 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.9, 1:2.3.21+dfsg1-2ubuntu6.5, 1:2.4.1+dfsg1-5ubuntu4.2, 1:2.4.2+dfsg1-3ubuntu2.1 19.05.2026 SB2026051937
SB2026051938
SB2026051939
and 2 more
#VU131866 - Resource exhaustion
CVE-2026-40016
CWE-400 Low
No
No
1:2.3.16+dfsg1-3ubuntu2.9, 1:2.3.21+dfsg1-2ubuntu6.5, 1:2.4.1+dfsg1-5ubuntu4.2, 1:2.4.2+dfsg1-3ubuntu2.1 19.05.2026 SB2026051937
SB2026053112
SB2026060308
and 1 more
#VU131867 - Improper Control of Resource Identifiers ('Resource Injection')
CVE-2026-33603
CWE-99 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.9, 1:2.3.21+dfsg1-2ubuntu6.5, 1:2.4.1+dfsg1-5ubuntu4.2, 1:2.4.2+dfsg1-3ubuntu2.1 19.05.2026 SB2026051937
SB2026051938
SB2026051939
and 4 more
#VU131868 - Improper Access Control
CVE-2026-40020
CWE-284 Low
No
No
1:2.3.16+dfsg1-3ubuntu2.9, 1:2.3.21+dfsg1-2ubuntu6.5, 1:2.4.1+dfsg1-5ubuntu4.2, 1:2.4.2+dfsg1-3ubuntu2.1 19.05.2026 SB2026051937
SB2026051938
SB2026051939
and 4 more
#VU131869 - Resource exhaustion
CVE-2026-42006
CWE-400 Low
No
No
1:2.3.16+dfsg1-3ubuntu2.9, 1:2.3.21+dfsg1-2ubuntu6.5, 1:2.4.1+dfsg1-5ubuntu4.2, 1:2.4.2+dfsg1-3ubuntu2.1 19.05.2026 SB2026051937
SB2026051938
SB2026051939
and 14 more
#VU124721 - Improper input validation
CVE-2025-59028
CWE-20 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040127
SB2026040132
SB2026042920
#VU124722 - Improper input validation
CVE-2025-59032
CWE-20 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040128
SB2026040132
SB2026041137
and 14 more
#VU124723 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59031
CWE-200 Low
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040130
SB2026040132
SB2026041137
and 2 more
#VU124724 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-0394
CWE-22 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040126
SB2026040132
SB2026041137
and 1 more
#VU124725 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-27860
CWE-90 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040129
SB2026040132
SB2026042920
#VU124726 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-24031
CWE-89 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040129
SB2026040132
SB2026042920
#VU124727 - Resource exhaustion
CVE-2026-27859
CWE-400 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 2 more
#VU124728 - Resource exhaustion
CVE-2026-27857
CWE-400 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 20 more
#VU124729 - Resource exhaustion
CVE-2026-27858
CWE-400 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 16 more
#VU124730 - Improper Authentication
CVE-2026-27856
CWE-287 High
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 3 more
#VU124731 - Authentication Bypass by Capture-replay
CVE-2026-27855
CWE-294 Medium
No
No
1:2.3.16+dfsg1-3ubuntu2.7, 1:2.3.16+dfsg1-3ubuntu2.8, 1:2.3.21+dfsg1-2ubuntu6.3, 1:2.3.21+dfsg1-2ubuntu6.4, 1:2.4.1+dfsg1-5ubuntu4.1 01.04.2026 SB2026040129
SB2026040132
SB2026041137
and 2 more
#VU27984 - Improper input validation
CVE-2020-10967
CWE-20 Medium
No
No
1:2.3.4.1-5ubuntu3.1, 1:2.3.7.2-1ubuntu3.1 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 11 more
#VU27983 - Use After Free
CVE-2020-10958
CWE-416 Medium
No
No
1:2.3.4.1-5ubuntu3.1, 1:2.3.7.2-1ubuntu3.1 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 8 more
#VU27981 - NULL Pointer Dereference
CVE-2020-10957
CWE-476 Medium
No
No
1:2.3.4.1-5ubuntu3.1, 1:2.3.7.2-1ubuntu3.1 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 8 more
#VU20432 - Out-of-bounds write
CVE-2019-11500
CWE-787 High
No
No
1:2.2.22-1ubuntu2.11, 1:2.2.22-1ubuntu2.12, 1:2.2.33.2-1ubuntu4.4, 1:2.2.33.2-1ubuntu4.5, 1:2.3.4.1-1ubuntu2.3, 1:2.3.4.1-1ubuntu2.4 28.08.2019 SB2019082801
SB2019082802
SB2019082803
and 15 more


Showing elements 1 - 20 out of 25