CVE-2015-8076
- State
- Published
- Severity
- Not scored
- Published
- Dec 3, 2015
- Updated
- Aug 6, 2024
- Reserved
- Nov 4, 2015
Description
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://docs.cyrus.foundation/imap/release-notes/2.3/x/2.3.19.html
- https://docs.cyrus.foundation/imap/release-notes/2.4/x/2.4.18.html
- openSUSE-SU-2015:1623vendor-advisory
- https://docs.cyrus.foundation/imap/release-notes/2.5/x/2.5.4.html
- [oss-security] 20151104 Re: CVE request: urlfetch range handling flaw in Cyrus IMAPmailing-list
- openSUSE-SU-2015:1622vendor-advisory
- https://cyrus.foundation/cyrus-imapd/commit/?id=07de4ff1bf2fa340b9d77b8e7de8d43d47a33921
- [oss-security] 20150930 Re: CVE request: urlfetch range handling flaw in Cyrus IMAPmailing-list
- SUSE-SU-2016:1459vendor-advisory
- SUSE-SU-2016:1457vendor-advisory
- [oss-security] 20150929 CVE request: urlfetch range handling flaw in Cyrusmailing-list
- https://cyrus.foundation/cyrus-imapd/commit/?id=c21e179c1f6b968fe69bebe079176714e511587b
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.