CVE-2026-27852

EUVD-2026-67657

28.08.2026, 12:16

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit of the process and terminate it, causing denial of service for the affected user. Update to non-vulnerable version. No publicly available exploits are known.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 35.36%

Debian Releases

Debian Product

Codename

dovecot

bookworm	vulnerable
bookworm (security)	vulnerable
forky	1:2.4.5+dfsg1-2 fixed
sid	1:2.4.5+dfsg1-3 fixed
trixie	vulnerable
trixie (security)	1:2.4.1+dfsg1-6+deb13u7 fixed

Ubuntu Releases

Ubuntu Product

Codename

dovecot

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
trusty	needs-triage
xenial	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

dovecot22

suse enterprise sap 12 SP5	2.2.31-19.40.1 fixed
suse enterprise server 12 SP3	2.2.31-19.40.1 fixed
suse enterprise server 12 SP5	2.2.31-19.40.1 fixed

dovecot22-backend-mysql

suse enterprise sap 12 SP5	2.2.31-19.40.1 fixed
suse enterprise server 12 SP3	2.2.31-19.40.1 fixed
suse enterprise server 12 SP5	2.2.31-19.40.1 fixed

dovecot22-backend-pgsql

suse enterprise sap 12 SP5	2.2.31-19.40.1 fixed
suse enterprise server 12 SP3	2.2.31-19.40.1 fixed
suse enterprise server 12 SP5	2.2.31-19.40.1 fixed

dovecot22-backend-sqlite

suse enterprise sap 12 SP5	2.2.31-19.40.1 fixed
suse enterprise server 12 SP3	2.2.31-19.40.1 fixed
suse enterprise server 12 SP5	2.2.31-19.40.1 fixed

dovecot22-devel

suse enterprise sap 12 SP5	2.2.31-19.40.1 fixed
suse enterprise server 12 SP5	2.2.31-19.40.1 fixed

dovecot23

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-backend-mysql

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-backend-pgsql

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-backend-sqlite

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-devel

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-fts

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-fts-lucene

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-fts-solr

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

dovecot23-fts-squat

suse enterprise sap 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise sap 15 SP7	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP4	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP5	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP6	2.3.21.1-150200.76.1 fixed
suse enterprise server 15 SP7	2.3.21.1-150200.76.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

dovecot

RHEL 8

1:2.3.16-16.el8_10

fixed

dovecot-devel

RHEL 8

1:2.3.16-16.el8_10

fixed

dovecot-mysql

RHEL 8

1:2.3.16-16.el8_10

fixed

dovecot-pgsql

RHEL 8

1:2.3.16-16.el8_10

fixed

dovecot-pigeonhole

RHEL 8

1:2.3.16-16.el8_10

fixed

Amazon Linux Releases

Amazon Package

Release

dovecot

Amazon Linux 2	1:2.2.36-6.amzn2.1.4 fixed
Amazon Linux 2023	1:2.3.20-1.amzn2023.0.4 fixed

dovecot-debuginfo

Amazon Linux 2	1:2.2.36-6.amzn2.1.4 fixed
Amazon Linux 2023	1:2.3.20-1.amzn2023.0.4 fixed

dovecot-debugsource

Amazon Linux 2023

1:2.3.20-1.amzn2023.0.4

fixed

dovecot-devel

Amazon Linux 2	1:2.2.36-6.amzn2.1.4 fixed
Amazon Linux 2023	1:2.3.20-1.amzn2023.0.4 fixed

dovecot-mysql

Amazon Linux 2	1:2.2.36-6.amzn2.1.4 fixed
Amazon Linux 2023	1:2.3.20-1.amzn2023.0.4 fixed

dovecot-mysql-debuginfo

Amazon Linux 2023

1:2.3.20-1.amzn2023.0.4

fixed

dovecot-pgsql

Amazon Linux 2	1:2.2.36-6.amzn2.1.4 fixed
Amazon Linux 2023	1:2.3.20-1.amzn2023.0.4 fixed

dovecot-pgsql-debuginfo

Amazon Linux 2023

1:2.3.20-1.amzn2023.0.4

fixed

dovecot-pigeonhole

Amazon Linux 2	1:2.2.36-6.amzn2.1.4 fixed
Amazon Linux 2023	1:2.3.20-1.amzn2023.0.4 fixed

dovecot-pigeonhole-debuginfo

Amazon Linux 2023

1:2.3.20-1.amzn2023.0.4

fixed

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Vulnerability Media Exposure

[GERMAN] Dovecot: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um Sicherheitsvorkehrungen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.
Published: 2026-08-27T22:00:00+00:00

References

https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0003.json