dovecot22 (SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 package dovecot22, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2017-15132 — CVSS 7.5 (high): A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client…
• CVE-2017-2669 — CVSS 3.7 (low): Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the…
• CVE-2016-4983 — CVSS 3.3 (low): A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.