Debian/dovecot: medium 5.9
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential wil
Action: Upgrade dovecot to 1:2.3.19.1+dfsg1-2.1+deb12u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.3.19.1+dfsg1-2.1+deb12u2 | - |
Fixed versions
| 1:2.3.19.1+dfsg1-2.1+deb12u2 |
Sources
published · modified · JSON