7.5

CVE-2025-59032

ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dovecot ≫ Dovecot Version < 2.4.3
Open-xchange ≫ Dovecot SwEditionpro Version < 3.1.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.486
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@open-xchange.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-229 Improper Handling of Values

The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0001.json
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13498
https://access.redhat.com/errata/RHSA-2026:13830
https://access.redhat.com/errata/RHSA-2026:13857
https://access.redhat.com/errata/RHSA-2026:17602
https://access.redhat.com/errata/RHSA-2026:17625
https://access.redhat.com/errata/RHSA-2026:17626
https://access.redhat.com/errata/RHSA-2026:17628
https://access.redhat.com/errata/RHSA-2026:17630
https://access.redhat.com/errata/RHSA-2026:18053
https://access.redhat.com/errata/RHSA-2026:19149
https://access.redhat.com/errata/RHSA-2026:19364
https://access.redhat.com/errata/RHSA-2026:19453
https://access.redhat.com/errata/RHSA-2026:19455
https://access.redhat.com/errata/RHSA-2026:26564
https://access.redhat.com/security/cve/CVE-2025-59032
https://bugzilla.redhat.com/show_bug.cgi?id=2452172
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59032.json