Red Hat Security Advisory

RHSA-2024:9195

cyrus-imapd security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) cyrus-imapd-3.4.8-1.el9, cyrus-imapd-libs-3.4.8-1.el9, cyrus-imapd-utils-3.4.8-1.el9 +1

Fixes 1 record

TI-2024-22515 CVE-2024-34055 · GHSA-crp5-539g-qwq6

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to…

LOW 30

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2024-06-05 Partial fix CWE-770