Published: 28/06/2021 Updated: 07/11/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

The Sieve engine in Dovecot prior to 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dovecot dovecot
fedoraproject fedora 33
fedoraproject fedora 34

Debian Bug report logs - #990566 dovecot: CVE-2021-33515 CVE-2021-29157 CVE-2020-28200 Package: src:dovecot; Maintainer for src:dovecot is Dovecot Maintainers <dovecot@packagesdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 2 Jul 2021 08:45:02 UTC Severity: grave Tags: security, upstream F ...

A security issue has been found in Pigeonhole before version 0515 The Sieve interpreter is not protected against abusive scripts that claim excessive resource usage, especially scripts using massive amounts of regexps This means an attacker can cause a denial of service of the mail delivery system by using excessive amount of CPU and/or reachin ...

CWE-770 https://dovecot.org/security https://www.openwall.com/lists/oss-security/2021/06/28/3 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TK424DWFO2TKJYXZ2H3XL633TYJL4GQN/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990566 https://nvd.nist.gov https://security.archlinux.org/CVE-2020-28200

CVE-2020-28200

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect