GCVE - cpe:2.3:a:dovecot:dovecot:2.2:rc3:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dovecot:dovecot:2.2:rc3:*:*:*:*:*:*

part: a version: 2.2 update: rc3

Vendor	Dovecot (`4878954c-d284-58ab-9fab-9fdb4dcb62a5`)
Product	Dovecot (`69315d6c-8387-56ce-bab4-fd11daf3f0a0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/dovecot-core`	purl2cpe	2026-06-01 10:18:22.102953
`pkg:deb/ubuntu/dovecot-core`	purl2cpe	2026-06-01 10:18:22.102955
`pkg:docker/dovecot/dovecot`	purl2cpe	2026-06-01 10:18:22.102957
`pkg:github/dovecot/core`	purl2cpe	2026-06-01 10:18:22.102959
`pkg:rpm/fedora/dovecot`	purl2cpe	2026-06-01 10:18:22.102961
`pkg:rpm/opensuse/dovecot-core`	purl2cpe	2026-06-01 10:18:22.102963

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3430`	vulnerable	2026-06-08 05:05:32.631881	Details available Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service (resource consumption) via an incomplete SSL/TLS handshake for an IMAP/POP3 connection. Published: 2014-05-14T19:00:00.000Z Updated: 2024-08-06T10:43:06.101Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2014/05/09/4 http://secunia.com/advisories/59051 http://www.openwall.com/lists/oss-security/2014/05/09/8 http://secunia.com/advisories/59537 http://advisories.mageia.org/MGASA-2014-0223.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6171`	vulnerable	2026-06-08 05:04:55.543194	Details available checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server. Published: 2013-12-09T11:00:00.000Z Updated: 2024-08-06T17:29:42.974Z Open on db.gcve.eu Reference links http://cpanel.net/tsr-2013-0010-full-disclosure/ http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security https://usn.ubuntu.com/3556-2/ http://secunia.com/advisories/54808 http://www.dovecot.org/list/dovecot-news/2013-November/000264.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2111`	vulnerable	2026-06-08 05:03:58.377835	Details available The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters. Published: 2014-05-27T15:00:00.000Z Updated: 2024-08-06T15:27:40.826Z Open on db.gcve.eu Reference links http://secunia.com/advisories/53492 http://www.securitytracker.com/id/1028585 http://www.openwall.com/lists/oss-security/2013/05/24/1 http://www.dovecot.org/list/dovecot-news/2013-May/000255.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.