EUVD-2022-29299

Malicious code in bioql PyPI...

NewStart CGSL MAIN 6.06 : postfix Multiple Vulnerabilities (NS-SA-2025-0220)

The remote NewStart CGSL host, running version MAIN 6.06, has postfix packages installed that are affected by multiple vulnerabilities: - The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are...

CLSA-2025-1758920770 cyrus-sasl: Fix of CVE-2019-19906

CVE-2019-19906: fix out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet...

Linux Distros Unpatched Vulnerability : CVE-2025-23394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE...

Linux Distros Unpatched Vulnerability : CVE-2021-33582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table...

ROS-20250826-01

The Cyrus IMAP mail server vulnerability is related to an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service by sending multiple literals in a single command Cyrus IMAP mail server vulnerability is related...

Linux Distros Unpatched Vulnerability : CVE-2015-8078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via...

Linux Distros Unpatched Vulnerability : CVE-2015-8077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via...

TencentOS Server 3: cyrus-imapd (TSSA-2022:0245)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0245 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: cyrus-imapd (TSSA-2024:1073)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1073 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: cyrus-sasl (TSSA-2022:0013)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0013 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

UBUNTU-CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

CVE-2025-23394 daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

CVE-2025-23394

Summary (CVE-2025-23394) : A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed’s Cyrus IMAPd allows escalation from user cyrus to root. Affected: openSUSE Tumbleweed, cyrus-imapd before 3.8.4-2.1. Root cause: symlink following flaw enabling privilege escalation. Impact: ...

CVE-2025-23394 daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

openSUSE Tumbleweed cyrus-imapd 安全漏洞

openSUSE Tumbleweed cyrus-imapd is a highly scalable enterprise mail system open-sourced from openSUSE in Germany, using standards-based technology designed for enterprise environments of all sizes. A security vulnerability exists in openSUSE Tumbleweed cyrus-imapd versions prior to 3.8.4-2.1,...

Fedora: Security Advisory (FEDORA-2024-cfbdc342a2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Alibaba Cloud Linux 3 : 0067: cyrus-imapd (ALINUX3-SA-2021:0067)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0067 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-18928: Cyrus IMAP 2.5.x before...