CVE detail
CVE-2025-59032
ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 29.4 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
18 source links · newest first
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59032.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMar 27, 2026, 9:16 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2452172bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/security/cve/CVE-2025-59032access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:26564access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19455access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19453access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19364access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19149access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:18053access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:17630access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:17628access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:17626access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:17625access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:17602access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:13857access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:13830access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:13498access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:16 AM - https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0001.jsondocumentation.open-xchange.com
No excerpt available.
Vendor Advisorydocumentation.open-xchange.comMar 27, 2026, 9:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-59028CVSS 5.3 · Medium
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to D…
- CVE-2024-36737CVSS 7.5 · High
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.
- CVE-2020-25275CVSS 7.5 · High
Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME…
- CVE-2020-10967CVSS 5.3 · Medium
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
- CVE-2020-7957CVSS 5.3 · Medium
The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exist…
- CVE-2017-2669CVSS 3.7 · Low
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was…