Priority MEDIUM 52
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) charact…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07078 · Published 2002-12-11 · Fixed CWE-131
Priority MEDIUM 45
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2022-02-23 · Partial fix CWE-89
Priority MEDIUM 44
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08036 · Published 2019-12-19 · Partial fix CWE-193
Priority LOW 31
An issue was discovered in Cyrus IMAP before 3.12.4.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00259 · Published 2026-09-09 · Partial fix · 3.8.8, 3.10.4 +1 CWE-415
Priority LOW 31
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01227 · Published 2017-08-22 · No fix listed CWE-20
Priority LOW 30
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00836 · Published 2024-06-05 · Partial fix CWE-770
Priority LOW 29
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00348 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-863
Priority LOW 28
An issue was discovered in Cyrus IMAP before 3.12.4.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00224 · Published 2026-09-09 · Partial fix · 3.8.8, 3.10.4 +1 CWE-125
Priority LOW 24
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00298 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-863
Priority LOW 22
An issue was discovered in Cyrus IMAP before 3.12.4.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.0019 · Published 2026-09-09 · Partial fix · 3.8.8, 3.10.4 +1 CWE-863
Priority LOW 20
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00281 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-862
Priority LOW 20
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00306 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-204
Priority LOW 19
An issue was discovered in Cyrus IMAP before 3.12.4.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00218 · Published 2026-09-09 · Partial fix · 3.8.8, 3.10.4 +1 CWE-497
Priority LOW 19
An issue was discovered in Cyrus IMAP before 3.12.4.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00204 · Published 2026-09-09 · Partial fix · 3.8.8, 3.10.4 +1 CWE-420
Priority LOW 19
An issue was discovered in Cyrus IMAP before 3.12.4.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00213 · Published 2026-09-09 · Partial fix · 3.8.8, 3.10.4 +1 CWE-863
Priority LOW 19
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1MEDIUM 4.0· Network · No auth · No interaction · EPSS 0.00297 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-340
Priority LOW 17
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1LOW 3.5· Network · Low privileges · No interaction · EPSS 0.00286 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-672
Priority LOW 16
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1LOW 3.5· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-863
Priority LOW 15
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00265 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-126
Priority LOW 15
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2026-07-16 · Partial fix · 3.12.3 CWE-863
THREATIST.IORead the docs