Cyrus IMAP 1.5.14

CPE Details

Cyrus IMAP 1.5.14
cyrus
imap
1.5.14
2021-05-24
17h19 +00:00
2021-05-25
19h28 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:cyrus:imap:1.5.14:*:*:*:*:*:*:*

Informations

Vendor

cyrus

Product

imap

Version

1.5.14

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-33582 2021-09-01 03h32 +00:00 Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
7.5
High
CVE-2021-32056 2021-05-10 11h05 +00:00 Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
4.3
Medium
CVE-2017-14230 2017-09-10 07h00 +00:00 In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service (daemon crash) via a 'LIST "" "Other Users"' command.
9.1
Critical