Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-imapdUpgrade cyrus-imapd-libsUpgrade cyrus-imapd-utilsUpgrade perl-Cyrus | Nov 19, 2024 | Jun 5, 2024 |
| Debian | — | Upgrade cyrus-imapd | Jun 13, 2024 | Jun 5, 2024 |
| Freebsd | — | Upgrade cyrus-imapd25Upgrade cyrus-imapd36Upgrade cyrus-imapd34Upgrade cyrus-imapd38Upgrade cyrus-imapd32Upgrade cyrus-imapd30 | Jun 6, 2024 | Jun 5, 2024 |
| Oracle_linux | — | Upgrade cyrus-imapd-libsUpgrade cyrus-imapd-utilsUpgrade perl-CyrusUpgrade cyrus-imapd | Nov 21, 2024 | Jun 5, 2024 |
| Redhat_linux | — | Upgrade cyrus-imapd-debuginfoUpgrade cyrus-imapd-libs-debuginfoUpgrade perl-Cyrus-debuginfoUpgrade cyrus-imapd-debugsourceUpgrade cyrus-imapdUpgrade cyrus-imapd-virusscan-debuginfoUpgrade cyrus-imapd-utils-debuginfoUpgrade cyrus-imapd-utilsUpgrade cyrus-imapd-libsNo solution existsUpgrade perl-Cyrus | Nov 13, 2024 | Jun 5, 2024 |
| Rocky_linux | — | Upgrade cyrus-imapd-debugsourceUpgrade cyrus-imapdUpgrade cyrus-imapd-libs-debuginfoUpgrade perl-Cyrus-debuginfoUpgrade cyrus-imapd-utilsUpgrade cyrus-imapd-utils-debuginfoUpgrade cyrus-imapd-libsUpgrade cyrus-imapd-debuginfoUpgrade perl-Cyrus | Mar 18, 2025 | Jun 5, 2024 |
| Ubuntu | — | Upgrade cyrus-caldav (Ubuntu Pro)Upgrade cyrus-common (Ubuntu Pro)Upgrade cyrus-pop3d (Ubuntu Pro)Upgrade libcyrus-imap-perl (Ubuntu Pro)Upgrade cyrus-dev (Ubuntu Pro)Upgrade cyrus-replication (Ubuntu Pro)Upgrade cyrus-imapd (Ubuntu Pro)Upgrade cyrus-clients (Ubuntu Pro)Upgrade cyrus-admin (Ubuntu Pro)Upgrade cyrus-nntpd (Ubuntu Pro)Upgrade cyrus-murder (Ubuntu Pro) | Jan 24, 2025 | Jun 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub