Ilyar

**Name of the Vulnerable Software and Affected Versions** ManageSieve (affected versions not specified) **Description** An attacker with valid credentials can submit a Sieve script containing an extreme numeric literal. This triggers an out-of-bounds write during script compilation by the ManageSieve service, leading to memory corruption and a process crash. This results in a denial of service for script management and could potentially allow remote code execution. **Recommendations** Update to a non-vulnerable version. Disable the ManageSieve service if remote Sieve script management is not required.

**Name of the Vulnerable Software and Affected Versions** dovecot versions prior to 2.4.5-1.1 **Description** An attacker with valid credentials can establish multiple connections to the imap-hibernate service and send invalid commands. This action can trigger an intermittent out-of-bounds read, leading to a process crash. Such crashes interrupt hibernated IMAP sessions, resulting in a degradation of IMAP service. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing restricted memory. **Recommendations** Update to version 2.4.5-1.1. Disable IMAP hibernation.

**Name of the Vulnerable Software and Affected Versions** dovecot versions prior to 2.4.5-1.1 **Description** An unauthenticated attacker can cause a denial of service by sending a truncated quoted argument to the ManageSieve login process. This action triggers an infinite loop that consumes CPU resources, leading to the degradation of Sieve script management or a complete server crash if repeated connections are made. **Recommendations** Update to version 2.4.5-1.1. Monitor the system for abnormal CPU usage and terminate the offending process. Restrict network access to the ManageSieve service to trusted clients.

**Name of the Vulnerable Software and Affected Versions** Email servers allowing Sieve scripts (affected versions not specified) **Description** An attacker with valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free condition in the mail editing code. This allows writing memory contents beyond the intended buffer into the delivered mail, resulting in a memory leak and potential memory corruption during mail delivery. Such an issue can crash the delivery process and may lead to arbitrary code execution within the context of that process. **Recommendations** Disable the Sieve editheader extension. Update to a non-vulnerable version.

**Name of the Vulnerable Software and Affected Versions** Dovecot versions prior to 2.4.3 **Description** An attacker can send a crafted message before authentication, leading to excessive memory allocation within the managesieve component. This can cause the `managesieve-login` process to crash, potentially resulting in a denial-of-service condition. No publicly available exploits are currently known. **Recommendations** Update to version 2.4.3 or later. Protect access to the managesieve protocol.