Количество 13
Количество 13
CVE-2026-42006
An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known.
CVE-2026-42006
An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known.
CVE-2026-42006
An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known.
CVE-2026-42006
An attacker can cause uncontrolled memory usage with excessive bracing ...
RLSA-2026:41988
Important: dovecot security update
RLSA-2026:41905
Important: dovecot security update
GHSA-h665-fh45-xq6r
An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known.
ELSA-2026-41988
ELSA-2026-41988: dovecot security update (IMPORTANT)
ELSA-2026-41905
ELSA-2026-41905: dovecot security update (IMPORTANT)
BDU:2026-10389
Уязвимость почтовых серверов Dovecot и OX Dovecot Pro, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260708-73-0048
Уязвимость dovecot
SUSE-SU-2026:2645-1
Security update for dovecot22
openSUSE-SU-2026:21109-1
Security update for dovecot24
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-42006 An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known. | CVSS3: 4.3 | 1% Низкий | 3 месяца назад |
 | CVE-2026-42006 An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-42006 An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known. | CVSS3: 4.3 | 1% Низкий | 3 месяца назад |
| CVE-2026-42006 An attacker can cause uncontrolled memory usage with excessive bracing ... | CVSS3: 4.3 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:41988 Important: dovecot security update | 1% Низкий | 9 дней назад | |
| RLSA-2026:41905 Important: dovecot security update | 1% Низкий | 9 дней назад | |
| GHSA-h665-fh45-xq6r An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left open. In particular, the fix was for closing braces, but you could still use open braces to bypass the limit. Using excessive bracing, attacker can cause memory usage up to configured memory limit. Install fixed version, or configure vsz_limit for imap process to low value. No publicly available exploits are known. | CVSS3: 4.3 | 1% Низкий | 3 месяца назад |
| ELSA-2026-41988 ELSA-2026-41988: dovecot security update (IMPORTANT) | 11 дней назад | ||
| ELSA-2026-41905 ELSA-2026-41905: dovecot security update (IMPORTANT) | 11 дней назад | ||
 | BDU:2026-10389 Уязвимость почтовых серверов Dovecot и OX Dovecot Pro, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | ROS-20260708-73-0048 Уязвимость dovecot | CVSS3: 7.5 | 1% Низкий | 23 дня назад |
 | SUSE-SU-2026:2645-1 Security update for dovecot22 | около 1 месяца назад | ||
| openSUSE-SU-2026:21109-1 Security update for dovecot24 | около 1 месяца назад |
Уязвимостей на страницу