Test ID:	1.3.6.1.4.1.25623.1.0.117514
Category:	Denial of Service
Title:	Dovecot 1.2.0 - 2.3.14 DoS Vulnerability
Summary:	Dovecot is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Dovecot is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Sieve interpreter is not protected against abusive scripts that claim excessive resource usage. Especially scripts using massive amounts of regexps. Vulnerability Impact: Attacker can DoS the mail delivery system by using excessive amount of CPU and/or reaching the lmtp/lda process limits. Affected Software/OS: Dovecot version 1.2.0 through 2.3.14. Solution: Update to version 2.3.15 or later. Workaround: Disabling the regex sieve extension avoids the worst problems. lmtp_user_concurrency_limit may also be helpful. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-28200 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TK424DWFO2TKJYXZ2H3XL633TYJL4GQN/ https://dovecot.org/security
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.