Threats Tagged 'cve-2026-73209'

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

CVE-2026-73209 is a vulnerability in Open-Xchange GmbH's OX Dovecot Pro where an attacker with valid credentials can send specially crafted compressed data causing uncontrolled recursion. This leads to stack exhaustion and termination of the affected process, resulting in denial of service for IMAP. No public exploits are known. The vulnerability has a medium severity rating with a CVSS score of 6.5.

CVE-2026-73209 is a vulnerability in Open-Xchange GmbH OX Dovecot Pro where an attacker with valid credentials can send specially crafted compressed data that triggers uncontrolled recursion, causing the affected process to exhaust its stack and crash. This results in termination of the process and can lead to degradation or denial of service for the IMAP service. No public exploits are known for this vulnerability.