{"schemaVersion":3,"id":"CVE-2022-30550","aliases":["ALPINE-CVE-2022-30550","MGASA-2022-0296","SUSE-SU-2022:2431-1","SUSE-SU-2022:2432-1","SUSE-SU-2022:2448-1","SUSE-SU-2022:2618-1","RHSA-2022:7623","RHSA-2022:8208","UBUNTU-CVE-2022-30550","USN-5509-1","DEBIAN-CVE-2022-30550"],"status":"published","duplicateOf":null,"title":null,"description":"An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect username_filter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an unintended security configuration and can permit privilege escalation in certain configurations. The documentation does not advise against the use of passdb definitions that have the same driver and args settings. One such configuration would be where an administrator wishes to use the same PAM configuration or passwd file for both normal and master users but use the username_filter setting to restrict which of the users is able to be a master user.","dates":{"published":"2022-07-17T00:00:00.000Z","modified":"2024-10-15T18:35:00.129Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","exploitability":4.1,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0229,"percentile":0.83066,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.06500000000000013,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.02225},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0229,"percentile":0.83066}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02225,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0229,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0229,"percentile":0.83066}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-287","name":"Improper Authentication","description":"When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/287.html"}],"affected":[{"vendor":"alpine","product":"dovecot","name":"dovecot","label":"dovecot","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/dovecot","purlType":"apk","versions":[{"text":"≥ 2.3, < 2.3.19.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.3, < 2.3.19.1-r5","eol":null,"hubHref":null},{"vendor":"debian","product":"dovecot","name":"dovecot","label":"dovecot","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/dovecot","purlType":"deb","versions":[{"text":"< 1:2.3.19.1+dfsg1-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.19.1+dfsg1-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dovecot","name":"dovecot","label":"dovecot","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dovecot","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1:2.2.33.2-1ubuntu4.8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.7.2-1ubuntu3.6","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16+dfsg1-3ubuntu2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1:2.2.33.2-1ubuntu4.8 | < 1:2.3.7.2-1ubuntu3.6 | < 1:2.3.16+dfsg1-3ubuntu2.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.0","eol":{"isEol":true,"eolDate":"2024-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"10","label":"10 (Buster)","eolFrom":"2024-06-30T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"10.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"dovecot","product":"dovecot","name":"dovecot","label":"dovecot","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.3, < 2.4.0","noFixRecorded":false,"fixedIn":null},{"text":"2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.3, < 2.4.0 | 2.2","eol":{"isEol":true,"eolDate":"2025-01-24T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"2.2","label":"2.2","eolFrom":"2025-01-24T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"2.2.36.4"},"product":{"name":"dovecot","label":"Dovecot","category":"server-app"}},"hubHref":"/vendor/dovecot/dovecot"},{"vendor":"mageia","product":"dovecot","name":"dovecot","label":"dovecot","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/dovecot","purlType":"rpm","versions":[{"text":"< 2.3.17.1-1.2.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.17.1-1.2.mga8","eol":null,"hubHref":null},{"vendor":"opensuse","product":"dovecot23&distro=openSUSE Leap 15.3","name":"dovecot23","label":"dovecot23&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/dovecot23&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"dovecot23&distro=openSUSE Leap 15.4","name":"dovecot23","label":"dovecot23&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/dovecot23&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot","name":"dovecot","label":"dovecot","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-debuginfo","name":"dovecot-debuginfo","label":"dovecot-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-debugsource","name":"dovecot-debugsource","label":"dovecot-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-debugsource","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-devel","name":"dovecot-devel","label":"dovecot-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-devel","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-mysql","name":"dovecot-mysql","label":"dovecot-mysql","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-mysql","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-mysql-debuginfo","name":"dovecot-mysql-debuginfo","label":"dovecot-mysql-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-mysql-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-pgsql","name":"dovecot-pgsql","label":"dovecot-pgsql","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-pgsql","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-pgsql-debuginfo","name":"dovecot-pgsql-debuginfo","label":"dovecot-pgsql-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-pgsql-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-pigeonhole","name":"dovecot-pigeonhole","label":"dovecot-pigeonhole","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-pigeonhole","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"dovecot-pigeonhole-debuginfo","name":"dovecot-pigeonhole-debuginfo","label":"dovecot-pigeonhole-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/dovecot-pigeonhole-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2.3.16-3.el8","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.3.16-7.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.3.16-3.el8 | < 1:2.3.16-7.el9","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"dovecot22","label":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP3-BCL","name":"dovecot22","label":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP3-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE Linux Enterprise Server 12 SP3-BCL","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"dovecot22","label":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP5","name":"dovecot22","label":"dovecot22&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"dovecot22","label":"dovecot22&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"dovecot22","label":"dovecot22&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"dovecot22","label":"dovecot22&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE OpenStack Cloud 9","name":"dovecot22","label":"dovecot22&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot22&distro=SUSE OpenStack Cloud Crowbar 9","name":"dovecot22","label":"dovecot22&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot22&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 2.2.31-19.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.31-19.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Enterprise Storage 6","name":"dovecot23","label":"dovecot23&distro=SUSE Enterprise Storage 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Enterprise Storage 6","purlType":"rpm","versions":[{"text":"< 2.3.15-150100.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150100.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Enterprise Storage 7","name":"dovecot23","label":"dovecot23&distro=SUSE Enterprise Storage 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Enterprise Storage 7","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","purlType":"rpm","versions":[{"text":"< 2.3.15-150100.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150100.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.15-150100.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150100.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","purlType":"rpm","versions":[{"text":"< 2.3.15-150000.4.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150000.4.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.15-150000.4.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150000.4.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP4","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP1-BCL","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP1-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15 SP1-BCL","purlType":"rpm","versions":[{"text":"< 2.3.15-150100.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150100.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.15-150100.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150100.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP2-BCL","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15 SP2-BCL","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.15-150000.4.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150000.4.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15","purlType":"rpm","versions":[{"text":"< 2.3.15-150000.4.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150000.4.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 2.3.15-150100.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150100.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Manager Proxy 4.1","name":"dovecot23","label":"dovecot23&distro=SUSE Manager Proxy 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Manager Proxy 4.1","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Manager Retail Branch Server 4.1","name":"dovecot23","label":"dovecot23&distro=SUSE Manager Retail Branch Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Manager Retail Branch Server 4.1","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Manager Server 4.1","name":"dovecot23","label":"dovecot23&distro=SUSE Manager Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Manager Server 4.1","purlType":"rpm","versions":[{"text":"< 2.3.15-150200.62.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.15-150200.62.1","eol":null,"hubHref":null}],"affectedCount":48,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://dovecot.org/security","label":"dovecot.org/security","hostname":"dovecot.org","tags":["Vendor Advisory"]},{"url":"https://www.dovecot.org/download/","label":"www.dovecot.org/download/","hostname":"www.dovecot.org","tags":["Product"]},{"url":"https://www.openwall.com/lists/oss-security/2022/07/08/1","label":"www.openwall.com/lists/oss-security/2022/07/08/1","hostname":"www.openwall.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00032.html","label":"lists.debian.org/debian-lts-announce/2022/09/msg00032.html","hostname":"lists.debian.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202310-19","label":"security.gentoo.org/glsa/202310-19","hostname":"security.gentoo.org","tags":["Vendor Advisory","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-30550","label":"security.alpinelinux.org/vuln/CVE-2022-30550","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0296.html","label":"advisories.mageia.org/MGASA-2022-0296.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30618","label":"bugs.mageia.org/show_bug.cgi?id=30618","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://dovecot.org/pipermail/dovecot-news/2022-July/000477.html","label":"dovecot.org/pipermail/dovecot-news/2022-July/000477.html","hostname":"dovecot.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/notices/USN-5509-1","label":"ubuntu.com/security/notices/USN-5509-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/532QM5GABOZURM72SXKWEPBBQKUHLQC3/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/OQ5EW32AQSRSHPFQZM5W3PEYEKPBKGNA/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222431-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222431-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1201267","label":"bugzilla.suse.com/1201267","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30550","label":"www.suse.com/security/cve/CVE-2022-30550","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222432-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222432-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222448-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222448-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222618-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222618-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7623","label":"access.redhat.com/errata/RHSA-2022:7623","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105070","label":"bugzilla.redhat.com/show_bug.cgi?id=2105070","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7623.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7623.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30550","label":"access.redhat.com/security/cve/CVE-2022-30550","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30550","label":"www.cve.org/CVERecord?id=CVE-2022-30550","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30550","label":"nvd.nist.gov/vuln/detail/CVE-2022-30550","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://dovecot.org/pipermail/dovecot-news/2022-July/000478.html","label":"dovecot.org/pipermail/dovecot-news/2022-July/000478.html","hostname":"dovecot.org","tags":["ARTICLE"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8208","label":"access.redhat.com/errata/RHSA-2022:8208","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053368","label":"bugzilla.redhat.com/show_bug.cgi?id=2053368","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095399","label":"bugzilla.redhat.com/show_bug.cgi?id=2095399","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8208.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8208.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-30550","label":"ubuntu.com/security/CVE-2022-30550","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2022/07/06/9","label":"www.openwall.com/lists/oss-security/2022/07/06/9","hostname":"www.openwall.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-30550","label":"security-tracker.debian.org/tracker/CVE-2022-30550","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3122-1"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-07-17T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-10-15T18:35:00.129Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T04:12:22.237Z","stale":false,"partial":false}}