CVE-2025-59028

A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending invalid base64 Simple Authentication and Security Layer (SASL) data to the server. This action disconnects the login process from the authentication server, causing all active authentication sessions to fail. Consequently, this can lead to a Denial of Service (DoS) for concurrent logins, preventing legitimate users from authenticating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.