Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    USN-4993-1 (UBUNTU-CVE-2021-29157)

    Vulnerability from osv_ubuntu – Published: 2021-06-21 13:50 – Updated: 2026-04-22 07:36 – Source website
    VLAI
    Summary
    dovecot vulnerabilities
    Details

    Kirin discovered that Dovecot incorrectly escaped kid and azp fields in JWT tokens. A local attacker could possibly use this issue to validate tokens using arbitrary keys. This issue only affected Ubuntu 20.10 and Ubuntu 21.04. (CVE-2021-29157)

    Fabian Ising and Damian Poddebniak discovered that Dovecot incorrectly handled STARTTLS when using the SMTP submission service. A remote attacker could possibly use this issue to inject plaintext commands before STARTTLS negotiation. (CVE-2021-33515)

    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-33515",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "dovecot-auth-lua",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-core",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-gssapi",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-imapd",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-ldap",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-lmtpd",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-lucene",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-managesieved",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-mysql",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-pgsql",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-pop3d",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-sieve",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-solr",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-sqlite",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "dovecot-submissiond",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          },
          {
            "binary_name": "mail-stack-delivery",
            "binary_version": "1:2.3.7.2-1ubuntu3.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "dovecot",
        "purl": "pkg:deb/ubuntu/dovecot@1:2.3.7.2-1ubuntu3.4?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.3.7.2-1ubuntu3.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.3.4.1-5ubuntu3",
        "1:2.3.7.2-1ubuntu1",
        "1:2.3.7.2-1ubuntu2",
        "1:2.3.7.2-1ubuntu3",
        "1:2.3.7.2-1ubuntu3.1",
        "1:2.3.7.2-1ubuntu3.2",
        "1:2.3.7.2-1ubuntu3.3"
      ]
    }
  ],
  "aliases": [],
  "details": "Kirin discovered that Dovecot incorrectly escaped kid and azp fields in JWT\ntokens. A local attacker could possibly use this issue to validate tokens\nusing arbitrary keys. This issue only affected Ubuntu 20.10 and Ubuntu\n21.04. (CVE-2021-29157)\n\nFabian Ising and Damian Poddebniak discovered that Dovecot incorrectly\nhandled STARTTLS when using the SMTP submission service. A remote attacker\ncould possibly use this issue to inject plaintext commands before\nSTARTTLS negotiation. (CVE-2021-33515)\n",
  "id": "USN-4993-1",
  "modified": "2026-04-22T07:36:59Z",
  "published": "2021-06-21T13:50:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4993-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-29157"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-33515"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "dovecot vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2021-29157",
    "UBUNTU-CVE-2021-33515"
  ]
}