Dovecot contains two vulnerabilities: CVE-2024-23184 allows denial of service by sending a large number of address headers, and CVE-2024-23185 causes resource exhaustion when parsing very large headers. These issues affect Dovecot versions included in Red Hat Enterprise Linux 9.2 Extended Update Support and related distributions. Red Hat Product Security has rated these vulnerabilities as having moderate security impact and has issued updated packages to remediate them.

Exploitation of CVE-2024-23184 can cause denial of service by overwhelming the server with many address headers. CVE-2024-23185 can cause resource exhaustion during message parsing due to very large headers. Both vulnerabilities impact the availability of the Dovecot service but do not indicate privilege escalation or data compromise in the provided information.

Red Hat has released updated Dovecot packages for Red Hat Enterprise Linux 9.2 Extended Update Support and related variants that address these vulnerabilities. Users should apply these official security updates as described in Red Hat advisory RHSA-2024:6465. Patch status is confirmed as official-fix. No additional mitigation steps are indicated by the vendor advisory.