Vulnerabilities > Cyrus > Imap > High

DATE CVE VULNERABILITY TITLE RISK
2021-09-01 CVE-2021-33582 Algorithmic Complexity vulnerability in multiple products
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction.
network
low complexity
cyrus fedoraproject debian CWE-407
7.5
2015-12-03 CVE-2015-8076 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.
network
low complexity
opensuse cyrus CWE-119
7.5