Debian/dovecot: medium 6.5
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation
Action: Upgrade dovecot to 1:2.4.1+dfsg1-6+deb13u7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.4.1+dfsg1-6+deb13u7 | - |
Fixed versions
| 1:2.4.1+dfsg1-6+deb13u7 |
Sources
- osv: DEBIAN-CVE-2026-73209#Debian:13/dovecot
- https://security-tracker.debian.org/tracker/CVE-2026-73209
published · modified · JSON