First Last Prev Next    This bug is not in your last search results.
Bug 1187419 - (CVE-2021-33515) VUL-0: CVE-2021-33515: dovecot,dovecot22,dovecot23: Attacker can potentially steal user credentials and mails
(CVE-2021-33515)
VUL-0: CVE-2021-33515: dovecot,dovecot22,dovecot23: Attacker can potentially ...
Status: RESOLVED FIXED
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P3 - Medium : Normal
: ---
Assigned To: Security Team bot
Security Team bot
https://smash.suse.de/issue/302377 h...
CVSSv3.1:SUSE:CVE-2021-33515:4.2:(AV:...
:
Depends on:
Blocks: NOSTARTTLS
  Show dependency tree / graph
 
Reported: 2021-06-16 13:41 UTC by Gianluca Gabrielli
Modified: 2022-08-18 08:50 UTC (History)
3 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Upstream patch (2.59 KB, patch)
2021-06-16 13:43 UTC, Gianluca Gabrielli 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gianluca Gabrielli 2021-06-16 13:41:35 UTC 
via distros.

Open-Xchange Security Advisory 2021-06-21

Product: Dovecot
Vendor: OX Software GmbH
Internal reference: DOV-4583 (Bug ID)
Vulnerability type: CWE-74: Failure to Sanitize Data into a Different
Plane ('Injection')
Vulnerable version: 2.3.0-2.3.14
Vulnerable component: submission
Report confidence: Confirmed
Solution status: Fixed by Vendor
Fixed version: 2.3.14.1
Vendor notification: 2021-05-21
Solution date: 2021-05-22
Public disclosure: 2021-06-21
CVE reference: CVE-2021-33515
CVSS: 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Researcher credit: Fabian Ising and Damian Poddebniak of Münster
University of Applied Sciences

Vulnerability Details:

On-path attacker could inject plaintext commands before STARTTLS
negotiation that would be executed after STARTTLS finished with the
client. Only the SMTP submission service is affected.

Risk:

Attacker can potentially steal user credentials and mails. The attacker
needs to have sending permissions on the submission server (a valid
username and password).

Workaround:

None.

Solution:

Operators should update to 2.3.14.1 or later version.
Comment 3 Gianluca Gabrielli 2021-06-16 13:43:21 UTC 
Created attachment 850314 [details]
Upstream patch
Comment 4 Gianluca Gabrielli 2021-06-16 15:22:47 UTC 
Affected packages:
 - SUSE:SLE-15:Update/dovecot              2.3
 - SUSE:SLE-15-SP1:Update/dovecot23        2.3.11.3
 - SUSE:SLE-15-SP2:Update/dovecot23        2.3.11.3
 - SUSE:SLE-15:Update/dovecot23            2.3.11.3
 - openSUSE:Factory/dovecot23              2.3.14
Comment 6 Gianluca Gabrielli 2021-06-22 11:01:52 UTC 
This is now public
Comment 7 Swamp Workflow Management 2021-06-22 16:23:42 UTC 
SUSE-SU-2021:2122-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1187418,1187419
CVE References: CVE-2021-29157,CVE-2021-33515
JIRA References: 
Sources used:
SUSE Linux Enterprise Server for SAP 15 (src):    dovecot23-2.3.11.3-4.35.1
SUSE Linux Enterprise Server 15-LTSS (src):    dovecot23-2.3.11.3-4.35.1
SUSE Linux Enterprise High Performance Computing 15-LTSS (src):    dovecot23-2.3.11.3-4.35.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS (src):    dovecot23-2.3.11.3-4.35.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 8 Swamp Workflow Management 2021-06-22 16:29:09 UTC 
SUSE-SU-2021:2123-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1187418,1187419
CVE References: CVE-2021-29157,CVE-2021-33515
JIRA References: 
Sources used:
SUSE Linux Enterprise Module for Server Applications 15-SP3 (src):    dovecot23-2.3.11.3-55.1
SUSE Linux Enterprise Module for Server Applications 15-SP2 (src):    dovecot23-2.3.11.3-55.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 9 Swamp Workflow Management 2021-06-22 16:30:35 UTC 
SUSE-SU-2021:2124-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1187418,1187419
CVE References: CVE-2021-29157,CVE-2021-33515
JIRA References: 
Sources used:
SUSE Manager Server 4.0 (src):    dovecot23-2.3.11.3-24.1
SUSE Manager Retail Branch Server 4.0 (src):    dovecot23-2.3.11.3-24.1
SUSE Manager Proxy 4.0 (src):    dovecot23-2.3.11.3-24.1
SUSE Linux Enterprise Server for SAP 15-SP1 (src):    dovecot23-2.3.11.3-24.1
SUSE Linux Enterprise Server 15-SP1-LTSS (src):    dovecot23-2.3.11.3-24.1
SUSE Linux Enterprise Server 15-SP1-BCL (src):    dovecot23-2.3.11.3-24.1
SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src):    dovecot23-2.3.11.3-24.1
SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src):    dovecot23-2.3.11.3-24.1
SUSE Enterprise Storage 6 (src):    dovecot23-2.3.11.3-24.1
SUSE CaaS Platform 4.0 (src):    dovecot23-2.3.11.3-24.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 10 Swamp Workflow Management 2021-07-10 22:55:33 UTC 
openSUSE-SU-2021:2123-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1187418,1187419
CVE References: CVE-2021-29157,CVE-2021-33515
JIRA References: 
Sources used:
openSUSE Leap 15.3 (src):    dovecot23-2.3.11.3-55.1
Comment 11 Marcus Meissner 2021-08-09 11:44:09 UTC 
released
Comment 12 Swamp Workflow Management 2021-08-31 22:17:13 UTC 
# maintenance_jira_update_notice
SUSE-SU-2021:2890-1: An update that solves two vulnerabilities, contains one feature and has one errata is now available.

Category: security (moderate)
Bug References: 1187418,1187419,1187420
CVE References: CVE-2020-28200,CVE-2021-29157
JIRA References: SLE-19970
Sources used:
SUSE Linux Enterprise Server for SAP 15 (src):    dovecot23-2.3.15-4.38.3
SUSE Linux Enterprise Server 15-LTSS (src):    dovecot23-2.3.15-4.38.3
SUSE Linux Enterprise High Performance Computing 15-LTSS (src):    dovecot23-2.3.15-4.38.3
SUSE Linux Enterprise High Performance Computing 15-ESPOS (src):    dovecot23-2.3.15-4.38.3

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 13 Swamp Workflow Management 2021-08-31 22:20:56 UTC 
# maintenance_jira_update_notice
SUSE-SU-2021:2892-1: An update that solves two vulnerabilities, contains one feature and has one errata is now available.

Category: security (moderate)
Bug References: 1187418,1187419,1187420
CVE References: CVE-2020-28200,CVE-2021-29157
JIRA References: SLE-19970
Sources used:
SUSE Linux Enterprise Module for Server Applications 15-SP3 (src):    dovecot23-2.3.15-58.3
SUSE Linux Enterprise Module for Server Applications 15-SP2 (src):    dovecot23-2.3.15-58.3

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 14 Swamp Workflow Management 2021-08-31 22:22:26 UTC 
# maintenance_jira_update_notice
SUSE-SU-2021:2891-1: An update that solves two vulnerabilities, contains one feature and has one errata is now available.

Category: security (moderate)
Bug References: 1187418,1187419,1187420
CVE References: CVE-2020-28200,CVE-2021-29157
JIRA References: SLE-19970
Sources used:
SUSE Manager Server 4.0 (src):    dovecot23-2.3.15-27.3
SUSE Manager Retail Branch Server 4.0 (src):    dovecot23-2.3.15-27.3
SUSE Manager Proxy 4.0 (src):    dovecot23-2.3.15-27.3
SUSE Linux Enterprise Server for SAP 15-SP1 (src):    dovecot23-2.3.15-27.3
SUSE Linux Enterprise Server 15-SP1-LTSS (src):    dovecot23-2.3.15-27.3
SUSE Linux Enterprise Server 15-SP1-BCL (src):    dovecot23-2.3.15-27.3
SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src):    dovecot23-2.3.15-27.3
SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src):    dovecot23-2.3.15-27.3
SUSE Enterprise Storage 6 (src):    dovecot23-2.3.15-27.3
SUSE CaaS Platform 4.0 (src):    dovecot23-2.3.15-27.3

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 15 Swamp Workflow Management 2021-08-31 22:24:41 UTC 
# maintenance_jira_update_notice
openSUSE-SU-2021:2892-1: An update that solves two vulnerabilities, contains one feature and has one errata is now available.

Category: security (moderate)
Bug References: 1187418,1187419,1187420
CVE References: CVE-2020-28200,CVE-2021-29157
JIRA References: SLE-19970
Sources used:
openSUSE Leap 15.3 (src):    dovecot23-2.3.15-58.3
Comment 16 Swamp Workflow Management 2021-09-04 01:16:29 UTC 
# maintenance_jira_update_notice
openSUSE-SU-2021:1225-1: An update that solves two vulnerabilities, contains one feature and has one errata is now available.

Category: security (moderate)
Bug References: 1187418,1187419,1187420
CVE References: CVE-2020-28200,CVE-2021-29157
JIRA References: SLE-19970
Sources used:
openSUSE Leap 15.2 (src):    dovecot23-2.3.15-lp152.2.12.1
Comment 20 Hu 2022-08-18 08:50:56 UTC 
Thanks a lot for clarifying, closing.
First Last Prev Next    This bug is not in your last search results.