Threats Tagged 'cve-2026-33607'

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

CVE-2026-33607 is a medium severity vulnerability in Open-Xchange GmbH's OX Dovecot Pro where an authenticated attacker can use the IMAP LIST command to cause uncontrolled CPU consumption. This may lead to performance degradation or denial of service for the IMAP service. No public exploits are known. Mitigation involves monitoring CPU usage, terminating offending processes, locking the attacker account, or installing a fixed version if available.

CVE-2026-33607 is a medium severity vulnerability in Open-Xchange GmbH's OX Dovecot Pro. An attacker with valid credentials can exploit the IMAP LIST command to cause excessive CPU consumption, potentially leading to degradation or denial of service of the IMAP service. No public exploits are known. Mitigation involves monitoring for abnormal CPU usage, terminating offending processes, locking the associated account, or installing a fixed version if available.