Cyrus IMAP 2.5.16

CPE Details

Cyrus IMAP 2.5.16
cyrus
imap
2.5.16
2021-05-24
17h19 +00:00
2021-05-25
19h28 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:cyrus:imap:2.5.16:*:*:*:*:*:*:*

Informations

Vendor

cyrus

Product

imap

Version

2.5.16

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-33582 2021-09-01 03h32 +00:00 Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
7.5
Haute
CVE-2021-32056 2021-05-10 11h05 +00:00 Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
4.3
Moyen
CVE-2017-14230 2017-09-10 07h00 +00:00 In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service (daemon crash) via a 'LIST "" "Other Users"' command.
9.1
Critique