1601 matches found
CVE-2021-33582
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...
PT-2021-6543 · Unknown +6 · Cyrus Imap +6
Name of the Vulnerable Software and Affected Versions: Cyrus IMAP versions prior to 3.0.16 Cyrus IMAP versions prior to 3.2.8 Cyrus IMAP versions prior to 3.4.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a multiple-minute daemon hang. This occurs due...
CVE-2021-33582
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...
Cyrus IMAP 加密问题漏洞
Cyrus IMAP is an open source mail server for the IMAP Interactive Mail Access Protocol protocol based on Unix and Linux operating systems. A cryptographic issue vulnerability exists in Cyrus IMAP that stems from the product's internal hash table not using a valid string encryption algorithm...
UBUNTU-CVE-2021-33582
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service multiple-minute daemon hang via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16...
Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2021-2081)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advisory ROSA-SA-2021-1820
Software: cyrus-sasl 2.1.26 OS: Cobalt 7.9 CVE-ID: CVE-2020-8032 CVE-Crit: HIGH CVE-DESC: An insecure temporary file vulnerability in the cyrus-sasl openSUSE Factory package allows local attackers to escalate to the root level. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 an...
EulerOS Virtualization for ARM 64 3.0.2.0 : cyrus-sasl (EulerOS-SA-2021-2081)
According to the version of the cyrus-sasl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in...
Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by a vulnerability in cyrus-sasl (CVE-2019-19906)
Summary IBM Bootable Media Creator BoMC has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-19906 DESCRIPTION: cyrus-sasl is vulnerable to a denial of service, caused by an off-by-one error in sasladdstring in common.c. By sending a malformed LDAP packet, a remote...
Security fix for the ALT Linux 9 package cyrus-imapd version 3.2.7-alt1
3.2.7-alt1 built June 11, 2021 Sergey Y. Afonin in task 274230 June 10, 2021 Sergey Y. Afonin - 3.2.7 fixes: CVE-2021-32056...
SUSE SLES11 Security Update : cyrus-sasl (SUSE-SU-2020:14579-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14579-1 advisory. - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of- service in OpenLDAP via a malformed LDAP...
SUSE: Security Advisory (SUSE-SU-2020:14579-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cyrus-imapd -- multiple-minute daemon hang via input that is mishandled during hash-table interaction
Cyrus IMAP 3.4.2 Release Notes states: Fixed CVE-2021-33582: Certain user inputs are used as hash table keys during processing. A poorly chosen string hashing algorithm meant that the user could control which bucket their data was stored in, allowing a malicious user to direct many inputs to a...
cyrus-imapd bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
cyrus-imapd bug fix and enhancement update
An update is available for cyrus-imapd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
Authorization Bypass
Cyrus IMAP is vulnerable to authorization bypass. A remote authenticated user is able to bypass intended access restrictions on server annotations and consequently cause replication to stall...
CVE-2021-32056
Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...
FreeBSD : cyrus-imapd -- Remote authenticated users could bypass intended access restrictions on certain server annotations. (12156786-b18a-11eb-8cba-080027b00c2e)
Cyrus IMAP 3.4.1 Release Notes states : Fixed CVE-2021-32056: Remote authenticated users could bypass intended access restrictions on certain server annotations. Additionally, a long-standing bug in replication did not allow server annotations to be replicated. Combining these two bugs, a remote...
Cyrus IMAP < 3.2.7, 3.3.x < 3.4.1 DoS Vulnerability
Cyrus IMAP is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
