PT-2025-54917 · Dovecot+2 · Dovecot+2
CVE-2025-59028
·
Published
2025-01-01
·
Updated
2026-04-30
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Dovecot versions prior to 2.4.3
Description
Sending invalid base64 SASL data can disrupt the login process by disconnecting it from the authentication server, leading to the failure of all active authentication sessions. This can be used to cause a denial-of-service condition, breaking concurrent logins.
Recommendations
Install version 2.4.3 or disable concurrency in login processes.
Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Dovecot
Linuxmint
Ubuntu