Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dovecot-mysqlUpgrade dovecotUpgrade dovecot-develUpgrade dovecot-pigeonholeUpgrade dovecot-pgsql | May 6, 2026 | May 5, 2026 |
| Amazon_linux_2023 | — | Upgrade dovecot-pgsql-debuginfoUpgrade dovecot-debuginfoUpgrade dovecot-mysqlUpgrade dovecotUpgrade dovecot-pgsqlUpgrade dovecot-pigeonhole-debuginfoUpgrade dovecot-mysql-debuginfoUpgrade dovecot-develUpgrade dovecot-pigeonholeUpgrade dovecot-debugsource | Apr 14, 2026 | Mar 27, 2026 |
| Debian | — | Upgrade dovecot | Apr 7, 2026 | Apr 7, 2026 |
| Oracle_linux | — | Upgrade dovecot-pigeonholeUpgrade dovecot-mysqlUpgrade dovecotUpgrade dovecot-pgsqlUpgrade dovecot-devel | May 6, 2026 | Mar 27, 2026 |
| Redhat_linux | — | Upgrade dovecot-pgsqlUpgrade dovecot-develUpgrade dovecot-pigeonhole-debuginfoNo solution existsUpgrade dovecot-debuginfoUpgrade dovecotUpgrade dovecot-mysqlUpgrade dovecot-mysql-debuginfoUpgrade dovecot-debugsourceUpgrade dovecot-pgsql-debuginfoUpgrade dovecot-pigeonhole | May 6, 2026 | Mar 27, 2026 |
| Rocky_linux | — | Upgrade dovecotUpgrade dovecot-pgsql-debuginfoUpgrade dovecot-mysql-debuginfoUpgrade dovecot-debuginfoUpgrade dovecot-mysqlUpgrade dovecot-debugsourceUpgrade dovecot-develUpgrade dovecot-pigeonhole-debuginfoUpgrade dovecot-pigeonholeUpgrade dovecot-pgsql | May 11, 2026 | May 7, 2026 |
| Ubuntu | — | Upgrade dovecot-core | Apr 1, 2026 | Mar 31, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub