Lucene search

Cyrus Imap Security Vulnerabilities

cve

CVE-2017-12843

Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command.

6.5CVSS

6.1AI Score

0.001EPSS

2017-08-22 02:29 PM

cve

CVE-2024-34055

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

6.5CVSS

6.5AI Score

0.0005EPSS

2024-06-05 05:15 AM