The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0035 advisory.

    This advisory aggregates security fixes for the dovecot SRPM in CIQ LTS 8.6. It addresses 21 CVEs:
    CVE-2019-11500, CVE-2020-24386, CVE-2020-25275, CVE-2020-12100, CVE-2017-14461, and 16 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Dovecot before 2.3.11.3, uncontrolled recursion in     submission, lmtp, and lda allows remote attackers to     cause a denial of service (resource consumption) via a     crafted e-mail message with deeply nested MIME     parts.(CVE-2020-12100)

  - The ssl-proxy-openssl.c function in Dovecot before     2.2.17, when SSLv3 is disabled, allow remote attackers     to cause a denial of service (login process crash) via     vectors related to handshake failures.(CVE-2015-3420)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

fixes CVE-2015-3420: SSL/TLS handshake failures leading to a crash of the login process

  - dovecot updated to 2.2.16

    - auth: Don't crash if master user login is attempted       without any configured master=yes passdbs

  - Parsing UTF-8 text for mails could have caused broken     results sometimes if buffering was split in the middle     of a UTF-8 character. This affected at least searching     messages.

  - String sanitization for some logged output wasn't done     properly: UTF-8 text could have been truncated wrongly     or the truncation may not have happened at all.

  - fts-lucene: Lookups from virtual mailbox consisting of     over 32 physical mailboxes could have caused crashes.

  - dovecot updated to 2.2.16

    - auth: Don't crash if master user login is attempted       without any configured master=yes passdbs

  - Parsing UTF-8 text for mails could have caused broken     results sometimes if buffering was split in the middle     of a UTF-8 character. This affected at least searching     messages.

  - String sanitization for some logged output wasn't done     properly: UTF-8 text could have been truncated wrongly     or the truncation may not have happened at all.

  - fts-lucene: Lookups from virtual mailbox consisting of     over 32 physical mailboxes could have caused crashes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
357898	Rocky Linux 8.6 [CIQ] Security Update: dovecot / dovecot-debuginfo / dovecot-debugsource / dovecot-devel / etc Multiple Vulnerabilities (ciqsa-2026_0035)	Nessus	Rocky Linux Local Security Checks	Local	critical
145207	EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2021-1064)	Nessus	Huawei Local Security Checks	Local	high
83549	Fedora 20 : dovecot-2.2.16-2.fc20 (2015-7159)	Nessus	Fedora Local Security Checks	Local	medium
83548	Fedora 21 : dovecot-2.2.16-2.fc21 (2015-7089)	Nessus	Fedora Local Security Checks	Local	medium
83223	Fedora 22 : dovecot-2.2.16-2.fc22 (2015-7156)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2015-3420

medium

Tenable Plugins

critical

high

medium

medium

medium