Vulnetix
Try Vulnetix Request Demo
CVE-2021-33515 PUBLISHED

The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.

EPSS 9.84% · 92.9th percentile

Risk Scores

EPSS Score
9.84%
92.9th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSdovecot0, 1:2.3.4.1-5ubuntu3, 1:2.3.7.2-1ubuntu1

Timeline

References

Open in Interactive Console →