Debian/dovecot: medium 6.5
Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit. Attacker can use this to degr
Action: Upgrade dovecot to 1:2.4.1+dfsg1-6+deb13u6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.4.1+dfsg1-6+deb13u6 | - |
Fixed versions
| 1:2.4.1+dfsg1-6+deb13u6 |
Sources
- osv: DEBIAN-CVE-2026-40016#Debian:13/dovecot
- https://security-tracker.debian.org/tracker/CVE-2026-40016
published · modified · JSON