Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-27858

Fixed in a distro release EPSS <1%CVSS 7.5

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.

Published 2026-03-27 · CVE record · OSV

Products: Open-Xchange GmbH OX Dovecot Pro, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 10dovecot1:2.3.21-16.el10_1.1
AlmaLinux 10dovecot1:2.3.21-19.el10_2
AlmaLinux 10dovecot-devel1:2.3.21-16.el10_1.1
AlmaLinux 10dovecot-devel1:2.3.21-19.el10_2
AlmaLinux 10dovecot-mysql1:2.3.21-16.el10_1.1
AlmaLinux 10dovecot-mysql1:2.3.21-19.el10_2
AlmaLinux 10dovecot-pgsql1:2.3.21-16.el10_1.1
AlmaLinux 10dovecot-pgsql1:2.3.21-19.el10_2
AlmaLinux 10dovecot-pigeonhole1:2.3.21-16.el10_1.1
AlmaLinux 10dovecot-pigeonhole1:2.3.21-19.el10_2
AlmaLinux 8dovecot1:2.3.16-7.el8_10
AlmaLinux 8dovecot-devel1:2.3.16-7.el8_10
AlmaLinux 8dovecot-mysql1:2.3.16-7.el8_10
AlmaLinux 8dovecot-pgsql1:2.3.16-7.el8_10
AlmaLinux 8dovecot-pigeonhole1:2.3.16-7.el8_10
AlmaLinux 9dovecot1:2.3.16-15.el9_7.1
AlmaLinux 9dovecot1:2.3.16-18.el9_8
AlmaLinux 9dovecot-devel1:2.3.16-15.el9_7.1
AlmaLinux 9dovecot-devel1:2.3.16-18.el9_8
AlmaLinux 9dovecot-mysql1:2.3.16-15.el9_7.1
AlmaLinux 9dovecot-mysql1:2.3.16-18.el9_8
AlmaLinux 9dovecot-pgsql1:2.3.16-15.el9_7.1
AlmaLinux 9dovecot-pgsql1:2.3.16-18.el9_8
AlmaLinux 9dovecot-pigeonhole1:2.3.16-15.el9_7.1
AlmaLinux 9dovecot-pigeonhole1:2.3.16-18.el9_8
Debian 12dovecot1:2.3.19.1+dfsg1-2.1+deb12u2
Debian 13dovecot1:2.4.1+dfsg1-6+deb13u4
Debian 14dovecot1:2.4.3+dfsg1-1
Red Hat Enterprise Linux 10.1dovecot1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-debuginfo1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-debugsource1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-devel1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-mysql1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-mysql-debuginfo1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-pgsql1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-pgsql-debuginfo1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-pigeonhole1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.1dovecot-pigeonhole-debuginfo1:2.3.21-16.el10_1.1
Red Hat Enterprise Linux 10.2dovecot1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-debuginfo1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-debugsource1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-devel1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-mysql1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-mysql-debuginfo1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-pgsql1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-pgsql-debuginfo1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-pigeonhole1:2.3.21-19.el10_2
Red Hat Enterprise Linux 10.2dovecot-pigeonhole-debuginfo1:2.3.21-19.el10_2
Red Hat Enterprise Linux 8dovecot1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-debuginfo1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-debugsource1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-devel1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-mysql1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-mysql-debuginfo1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-pgsql1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-pgsql-debuginfo1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-pigeonhole1:2.3.16-7.el8_10
Red Hat Enterprise Linux 8dovecot-pigeonhole-debuginfo1:2.3.16-7.el8_10
Red Hat Enterprise Linux 9dovecot1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-debuginfo1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-debuginfo1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-debugsource1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-debugsource1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-devel1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-devel1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-mysql1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-mysql1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-mysql-debuginfo1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-mysql-debuginfo1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-pgsql1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-pgsql1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-pgsql-debuginfo1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-pgsql-debuginfo1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-pigeonhole1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux 9dovecot-pigeonhole1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-pigeonhole-debuginfo1:2.3.16-18.el9_8
Red Hat Enterprise Linux 9dovecot-pigeonhole-debuginfo1:2.3.16-15.el9_7.1
Red Hat Enterprise Linux eus 10.0dovecot1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-debuginfo1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-debugsource1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-devel1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-mysql1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-mysql-debuginfo1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-pgsql1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-pgsql-debuginfo1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-pigeonhole1:2.3.21-16.el10_0.1
Red Hat Enterprise Linux eus 10.0dovecot-pigeonhole-debuginfo1:2.3.21-16.el10_0.1
Red Hat rhel aus 8.4dovecot1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-debugsource1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-mysql1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-mysql-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-pgsql1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-pgsql-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-pigeonhole1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.4dovecot-pigeonhole-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel aus 8.6dovecot1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-debugsource1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-mysql1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-mysql-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-pgsql1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-pgsql-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-pigeonhole1:2.3.16-2.el8_6.1
Red Hat rhel aus 8.6dovecot-pigeonhole-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-debugsource1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-mysql1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-mysql-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-pgsql1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-pgsql-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-pigeonhole1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.6dovecot-pigeonhole-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel e4s 8.8dovecot1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-debuginfo1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-debugsource1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-mysql1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-mysql-debuginfo1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-pgsql1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-pgsql-debuginfo1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-pigeonhole1:2.3.16-3.el8_8.1
Red Hat rhel e4s 8.8dovecot-pigeonhole-debuginfo1:2.3.16-3.el8_8.1
Red Hat rhel e4s 9.0dovecot1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-debuginfo1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-debugsource1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-mysql1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-mysql-debuginfo1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-pgsql1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-pgsql-debuginfo1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-pigeonhole1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.0dovecot-pigeonhole-debuginfo1:2.3.16-3.el9_0.1
Red Hat rhel e4s 9.2dovecot1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-debuginfo1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-debugsource1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-mysql1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-mysql-debuginfo1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-pgsql1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-pgsql-debuginfo1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-pigeonhole1:2.3.16-8.el9_2.2
Red Hat rhel e4s 9.2dovecot-pigeonhole-debuginfo1:2.3.16-8.el9_2.2
Red Hat rhel els 7dovecot1:2.2.36-8.el7_9.1
Red Hat rhel els 7dovecot-debuginfo1:2.2.36-8.el7_9.1
Red Hat rhel els 7dovecot-devel1:2.2.36-8.el7_9.1
Red Hat rhel els 7dovecot-mysql1:2.2.36-8.el7_9.1
Red Hat rhel els 7dovecot-pgsql1:2.2.36-8.el7_9.1
Red Hat rhel els 7dovecot-pigeonhole1:2.2.36-8.el7_9.1
Red Hat rhel eus 9.4dovecot1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-debuginfo1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-debugsource1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-devel1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-mysql1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-mysql-debuginfo1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-pgsql1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-pgsql-debuginfo1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-pigeonhole1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.4dovecot-pigeonhole-debuginfo1:2.3.16-11.el9_4.2
Red Hat rhel eus 9.6dovecot1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-debuginfo1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-debugsource1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-devel1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-mysql1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-mysql-debuginfo1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-pgsql1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-pgsql-debuginfo1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-pigeonhole1:2.3.16-15.el9_6.1
Red Hat rhel eus 9.6dovecot-pigeonhole-debuginfo1:2.3.16-15.el9_6.1
Red Hat rhel eus long life 8.4dovecot1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-debugsource1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-mysql1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-mysql-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-pgsql1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-pgsql-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-pigeonhole1:2.3.8-9.el8_4.1
Red Hat rhel eus long life 8.4dovecot-pigeonhole-debuginfo1:2.3.8-9.el8_4.1
Red Hat rhel tus 8.6dovecot1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-debugsource1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-mysql1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-mysql-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-pgsql1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-pgsql-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-pigeonhole1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.6dovecot-pigeonhole-debuginfo1:2.3.16-2.el8_6.1
Red Hat rhel tus 8.8dovecot1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-debuginfo1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-debugsource1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-mysql1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-mysql-debuginfo1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-pgsql1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-pgsql-debuginfo1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-pigeonhole1:2.3.16-3.el8_8.1
Red Hat rhel tus 8.8dovecot-pigeonhole-debuginfo1:2.3.16-3.el8_8.1
Rocky Linux 10dovecot1:2.3.21-19.el10_2
Rocky Linux 10dovecot1:2.3.21-16.el10_1.1
Rocky Linux 8dovecot1:2.3.16-7.el8_10
Rocky Linux 9dovecot1:2.3.16-15.el9_7.1
Rocky Linux 9dovecot1:2.3.16-18.el9_8
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSdovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSdovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSdovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSdovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Module for Server Applications 15 SP7dovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Server 15 SP4-LTSSdovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Server 15 SP5-LTSSdovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Server 15 SP6-LTSSdovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Server 16.0dovecot242.4.3-160000.1.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4dovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5dovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6dovecot232.3.21.1-150200.76.1
SUSE Linux Enterprise Server for SAP applications 16.0dovecot242.4.3-160000.1.1
Ubuntu 16.04 LTSdovecotno fix
Ubuntu 18.04 LTSdovecotno fix
Ubuntu 20.04 LTSdovecotno fix
Ubuntu 22.04 LTSdovecot1:2.3.16+dfsg1-3ubuntu2.7
Ubuntu 24.04 LTSdovecot1:2.3.21+dfsg1-2ubuntu6.3
Ubuntu 25.10dovecot1:2.4.1+dfsg1-5ubuntu4.1
Ubuntu Pro 14.04 LTSdovecotno fix
openSUSE Leap 16.0dovecot242.4.3-160000.1.1
openSUSE Tumbleweeddovecot242.4.3-1.1