EUVD-2013-0310

Malware in sbrugna...

EUVD-2005-0194

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-44143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message...

CVE-2024-33028

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released...

CVE-2024-33028

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released...

CVE-2024-33028 Use After Free in Automotive Telematics

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released...

CVE-2024-33028 Use After Free in Automotive Telematics

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released...

OPENSUSE-SU-2024:11779-1 isync-1.4.4-1.1 on GA media

These are all security issues fixed in the isync-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10866-1 isync-1.4.3-1.2 on GA media

These are all security issues fixed in the isync-1.4.3-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2021-44143

A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message that lacks headers i.e., one that starts with an empty line to provoke a heap overflow, which could conceivably be exploited for remote...

GLSA-202208-15 : isync: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-15 isync: Multiple Vulnerabilities - A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially...

isync: Multiple Vulnerabilities

Background isync is an IMAP and MailDir mailbox synchronizer. Description Multiple vulnerabilities have been discovered in isync. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaroun...

Debian: Security Advisory (DLA-3066-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3066-1] isync security update

Debian LTS Advisory DLA-3066-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 01, 2022 https://wiki.debian.org/LTS Package : isync Version : 1.2.1-2+deb9u1 CVE ID : CVE-2021-3578 CVE-2021-3657 CVE-2021-20247 Debian Bug : 983351 989564 Several security...

DLA-3066-1 isync - security update

Bulletin has no description...

Debian DLA-3066-1 : isync - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3066 advisory. - A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised...

Fedora: Security Advisory for isync (FEDORA-2021-b7fdb7e69a)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for isync (FEDORA-2021-577129851b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

isync is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in isync/mbsync which allows an attacker to cause an application crash...

Remote Code Execution (RCE)

isync is vulnerable to remote code execution. A flaw found due to an unchecked condition, allowing attacker to use the compromised IMAP server to send a crafted mail message to provoke a heap overflow and its leads to remote code execution...