Known vulnerabilities in dovecot (Debian package) 1:2.2.27-3+deb9u2~bpo8+1

Vendor: Debian
Version: 1:2.2.27-3+deb9u2~bpo8+1
Software CPE: cpe:2.3:o:debian:dovecot_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting dovecot (Debian package) version 1:2.2.27-3+deb9u2~bpo8+1 dovecot (Debian package) 1:2.2.27-3+deb9u2~bpo8+1 is affected by 3 vulnerabilities: 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20432 - Out-of-bounds write
CVE-2019-11500
CWE-787 High
No
No
1:2.2.27-3+deb9u5 28.08.2019 SB2019082801
SB2019082802
SB2019082803
and 15 more
#VU18089 - Stack-based buffer overflow
CVE-2019-7524
CWE-121 Low
No
No
1:2.2.27-3+deb9u4 28.03.2019 SB2019032801
SB2019032901
SB2019040102
and 10 more
#VU17374 - Authentication Bypass Issues
CVE-2019-3814
CWE-592 Medium
No
No
1:2.2.27-3+deb9u3 05.02.2019 SB2019020504
SB2019020615
SB2019020616
and 9 more