Threats Tagged 'cve-2026-40019'

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

CVE-2026-40019 is a vulnerability in Open-Xchange GmbH OX Dovecot CE version 2.4.3 where an unauthenticated attacker can cause the ManageSieve login process to enter an infinite loop by sending a truncated quoted argument. This leads to uncontrolled CPU consumption, potentially degrading or denying service for Sieve script management. No public exploits are known for this vulnerability.

CVE-2026-40019 is a medium severity vulnerability in Open-Xchange GmbH's OX Dovecot CE version 2.4.3. An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, causing it to enter an infinite loop that consumes CPU resources. This can degrade or deny service for Sieve script management. No public exploits are known, and no official patch or remediation level has been confirmed.