Количество 9
Количество 9
GHSA-mv3x-9fw3-qf38
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known.
CVE-2026-27856
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known.
CVE-2026-27856
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known.
CVE-2026-27856
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known.
CVE-2026-27856
Doveadm credentials are verified using direct comparison which is susc ...
BDU:2026-10401
Уязвимость компонента doveadm почтового сервера Dovecot, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260707-73-0041
Уязвимость dovecot
SUSE-SU-2026:1641-1
Security update for dovecot22
openSUSE-SU-2026:20554-1
Security update for dovecot24
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mv3x-9fw3-qf38 Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known. | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
 | CVE-2026-27856 Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known. | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
 | CVE-2026-27856 Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known. | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
 | CVE-2026-27856 Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port, install fixed version. No publicly available exploits are known. | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
| CVE-2026-27856 Doveadm credentials are verified using direct comparison which is susc ... | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
 | BDU:2026-10401 Уязвимость компонента doveadm почтового сервера Dovecot, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.9 | 0% Низкий | 4 месяца назад |
 | ROS-20260707-73-0041 Уязвимость dovecot | CVSS3: 5.9 | 0% Низкий | 24 дня назад |
 | SUSE-SU-2026:1641-1 Security update for dovecot22 | 3 месяца назад | ||
| openSUSE-SU-2026:20554-1 Security update for dovecot24 | 4 месяца назад |
Уязвимостей на страницу