Known vulnerabilities in dovecot (Debian package) 2.3.4.1-5+deb10u1

Vendor: Debian
Version: 2.3.4.1-5+deb10u1
Software CPE: cpe:2.3:o:debian:dovecot_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting dovecot (Debian package) version 2.3.4.1-5+deb10u1 dovecot (Debian package) 2.3.4.1-5+deb10u1 is affected by 8 vulnerabilities: 8 medium Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49238 - Improper input validation
CVE-2020-25275
CWE-20 Medium
No
No
2.3.4.1-5+deb10u5 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 9 more
#VU49237 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24386
CWE-200 Medium
No
No
2.3.4.1-5+deb10u5 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 11 more
#VU45673 - Improper input validation
CVE-2020-12674
CWE-20 Medium
No
No
2.3.4.1-5+deb10u3 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45672 - Out-of-bounds read
CVE-2020-12673
CWE-125 Medium
No
No
2.3.4.1-5+deb10u3 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12100
CWE-835 Medium
No
No
2.3.4.1-5+deb10u3, 2.3.4.1-5+deb10u5 13.08.2020 SB2020081309
SB2020081310
SB2020081917
and 16 more
#VU27984 - Improper input validation
CVE-2020-10967
CWE-20 Medium
No
No
1:2.3.4.1-5+deb10u2 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 11 more
#VU27983 - Use After Free
CVE-2020-10958
CWE-416 Medium
No
No
1:2.3.4.1-5+deb10u2 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 8 more
#VU27981 - NULL Pointer Dereference
CVE-2020-10957
CWE-476 Medium
No
No
1:2.3.4.1-5+deb10u2 18.05.2020 SB2020051816
SB2020051820
SB2020051917
and 8 more