CVE-2020-28200
dovecot: insufficient protection against excessive resource usage allows for a DoS
Loading…
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 21, 2021
Updated · November 22, 2025
Description
The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-400 · Uncontrolled Resource Consumption