Lucene search
Veracode Vulnerability DatabaseVERACODE:31040HistoryJun 23, 2021 - 7:01 p.m.
Arbitrary File Write
2021-06-2319:01:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
dovecot
arbitrary file write
jwt tokens
local disk
vulnerability
EPSS
0.001
Percentile
17.5%
Dovecot is vulnerable to arbitrary file write. It does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens in some configurations. This requires attacker to be able to write files to local disk.
References
dovecot.org/security
lists.fedoraproject.org/archives/list/[email protected]/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/
lists.fedoraproject.org/archives/list/[email protected]/message/TK424DWFO2TKJYXZ2H3XL633TYJL4GQN/
secdb.alpinelinux.org/edge/main.yaml
security.gentoo.org/glsa/202107-41
www.openwall.com/lists/oss-security/2021/06/28/1
Related
redhatcve
redhatcve
CVE-2021-29157
2021-06-21 15:05:59
alpinelinux
alpinelinux
CVE-2021-29157
2021-06-28 12:15:08
nvd
nvd
CVE-2021-29157
2021-06-28 12:15:08
debiancve
debiancve
CVE-2021-29157
2021-06-28 12:15:08
osv
osv
CVE-2021-29157
2021-06-28 12:15:08
dovecot vulnerabilities
2021-06-21 13:50:48
dovecot23-2.3.16-1.6 on GA media
2024-06-15 00:00:00
cve
cve
CVE-2021-29157
2021-06-28 12:15:08
ubuntucve
ubuntucve
CVE-2021-29157
2021-06-21 00:00:00
hackerone
hackerone
openvas
openvas
Dovecot 2.3.11 - 2.3.14 Path Traversal Vulnerability
2021-06-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2124-1)
2021-06-23 00:00:00
Ubuntu: Security Advisory (USN-4993-1)
2021-06-22 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-29157 affecting package dovecot for versions less than 2.3.20-1
2023-09-28 11:57:58
prion
prion
Path traversal
2021-06-28 12:15:00
cvelist
cvelist
CVE-2021-29157
2021-06-28 11:58:41
nessus
nessus
SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2021:2892-1)
2021-09-01 00:00:00
SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2021:2124-1)
2021-06-28 00:00:00
SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2021:2891-1)
2021-09-01 00:00:00
gentoo
gentoo
Dovecot: Multiple vulnerabilities
2021-07-18 00:00:00
freebsd
freebsd
dovecot -- multiple vulnerabilities
2021-03-22 00:00:00
ubuntu
ubuntu
Dovecot vulnerabilities
2021-06-21 00:00:00
suse
suse
Security update for dovecot23 (important)
2021-06-25 00:00:00
Security update for dovecot23 (important)
2021-07-11 00:00:00
Security update for dovecot23 (moderate)
2021-09-01 00:00:00
archlinux
archlinux
[ASA-202106-56] dovecot: information disclosure
2021-06-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package dovecot version 2.3.16-alt1
2021-08-19 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: dovecot-2.3.15-1.fc33
2021-07-05 01:36:13
[SECURITY] Fedora 34 Update: dovecot-2.3.15-1.fc34
2021-07-05 01:33:52
mageia
mageia
Updated dovecot packages fix security vulnerabilities
2021-12-19 15:26:08