Known vulnerabilities in dovecot (Debian package) 2.3.4.1-5+deb10u2

Vendor: Debian
Version: 2.3.4.1-5+deb10u2
Software CPE: cpe:2.3:o:debian:dovecot_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting dovecot (Debian package) version 2.3.4.1-5+deb10u2 dovecot (Debian package) 2.3.4.1-5+deb10u2 is affected by 5 vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49238 - Improper input validation
CVE-2020-25275
CWE-20 Medium
No
No
2.3.4.1-5+deb10u5 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 9 more
#VU49237 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24386
CWE-200 Medium
No
No
2.3.4.1-5+deb10u5 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 11 more
#VU45673 - Improper input validation
CVE-2020-12674
CWE-20 Medium
No
No
2.3.4.1-5+deb10u3 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45672 - Out-of-bounds read
CVE-2020-12673
CWE-125 Medium
No
No
2.3.4.1-5+deb10u3 13.08.2020 SB2020081309
SB2020081310
SB2020082104
and 15 more
#VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12100
CWE-835 Medium
No
No
2.3.4.1-5+deb10u3, 2.3.4.1-5+deb10u5 13.08.2020 SB2020081309
SB2020081310
SB2020081917
and 16 more