Red Hat Security Advisory

RHSA-2019:1771

cyrus-imapd security update

Released 2019-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) cyrus-imapd-3.0.7-15.el8_0.1, cyrus-imapd-utils-3.0.7-15.el8_0.1, cyrus-imapd-vzic-3.0.7-15.el8_0.1

Fixes 1 record

TI-2019-08479 CVE-2019-11356 · GHSA-v5c4-xfxj-8x84

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9…

MEDIUM 52

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07622 Published 2019-06-03 Fixed CWE-787