CVE-2016-4983: Dovecot

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.

Affected products

• Dovecot Dovecot: affected versions not specified
• Opensuse Leap: version 42.1 only; version 42.2 only
• Opensuse Opensuse: version 13.2 only
• Red Hat Enterprise Linux: version 4.0 only; version 5.0 only; version 6.0 only; version 7.0 only

Published 2019-11-05. Last modified 2026-06-17.