Approved changes feed: RSS · Atom

cpe:2.3:a:dovecot:dovecot:2.2.33.2:*:*:*:*:*:*:*

part: a version: 2.2.33.2 update: *

VendorDovecot (4878954c-d284-58ab-9fab-9fdb4dcb62a5)
ProductDovecot (69315d6c-8387-56ce-bab4-fd11daf3f0a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/dovecot-core purl2cpe 2026-06-01 10:18:22.102760
pkg:deb/ubuntu/dovecot-core purl2cpe 2026-06-01 10:18:22.102762
pkg:docker/dovecot/dovecot purl2cpe 2026-06-01 10:18:22.102764
pkg:github/dovecot/core purl2cpe 2026-06-01 10:18:22.102765
pkg:rpm/fedora/dovecot purl2cpe 2026-06-01 10:18:22.102767
pkg:rpm/opensuse/dovecot-core purl2cpe 2026-06-01 10:18:22.102769

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14461 vulnerable 2026-06-08 05:08:49.987136 Details available
MEDIUM (5.9)
A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.
Published: 2018-03-02T15:00:00.000Z
Updated: 2024-09-16T23:00:46.355Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.