PT-2025-54917 · Dovecot+2 · Dovecot+2
CVE-2025-59028
·
Publicado
2025-01-01
·
Atualizado
2026-04-30
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Dovecot versions prior to 2.4.3
Description
Sending invalid base64 SASL data can disrupt the login process by disconnecting it from the authentication server, leading to the failure of all active authentication sessions. This can be used to cause a denial-of-service condition, breaking concurrent logins.
Recommendations
Install version 2.4.3 or disable concurrency in login processes.
Exploit
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dovecot
Linuxmint
Ubuntu