CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

UBUNTU-CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

CVE-2025-23394

Summary (CVE-2025-23394) : A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed’s Cyrus IMAPd allows escalation from user cyrus to root. Affected: openSUSE Tumbleweed, cyrus-imapd before 3.8.4-2.1. Root cause: symlink following flaw enabling privilege escalation. Impact: ...

CVE-2025-23394 daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

CVE-2025-23394 daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

openSUSE Tumbleweed cyrus-imapd 安全漏洞

openSUSE Tumbleweed cyrus-imapd is a highly scalable enterprise mail system open-sourced from openSUSE in Germany, using standards-based technology designed for enterprise environments of all sizes. A security vulnerability exists in openSUSE Tumbleweed cyrus-imapd versions prior to 3.8.4-2.1,...

Fedora: Security Advisory (FEDORA-2024-cfbdc342a2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cyrus-imapd enhancement update

An update is available for cyrus-imapd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cyrus-imapd packages contain a high-performance mail server with IMAP...

cyrus-imapd bug fix update

An update is available for cyrus-imapd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cyrus-imapd packages contain a high-performance mail server with IMAP...

SUSE CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

RockyLinux 9 : cyrus-imapd (RLSA-2024:9195)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9195 advisory. cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command CVE-2024-34055 Tenable has extracted the preceding description block directl...

RLSA-2024:9195 Moderate: cyrus-imapd security update

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. Security Fixes: cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command CVE-2024-34055 For more details about the security issues, including the impact, a CVSS...

cyrus-imapd security update

An update is available for cyrus-imapd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cyrus-imapd packages contain a high-performance mail server with IMAP...

Oracle Linux 9 : cyrus-imapd (ELSA-2024-9195)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9195 advisory. 3.4.8-1 - Update to 3.4.8, fixing CVE-2024-34055 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

cyrus-imapd security update

3.4.8-1 - Update to 3.4.8, fixing CVE-2024-34055...

Fedora 41 : cyrus-imapd (2024-cfbdc342a2)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-cfbdc342a2 advisory. Automatic update for cyrus-imapd-3.8.3-1.fc41. Changelog Wed Jun 5 2024 Martin Osvald - 3.8.3-1 - Fix CVE-2024-34055 rhbz2290512 - Convert to %autorelease an...

RHSA-2024:9195 Red Hat Security Advisory: cyrus-imapd security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: cyrus-imapd security update

An update for cyrus-imapd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command

A flaw was found in Cyrus IMAP before versions 3.8.3 and 3.10.x , and before 3.10.0-rc1. This flaw allows authenticated attackers to cause unbounded memory allocation by sending multiple LITERALs in a single command...