https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:41:13.408982+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:9195 ALSA-2024:9195 — Moderate: cyrus-imapd security update 2026-10-07T15:41:13.427901+00:00

Affected: AlmaLinux:9: cyrus-imapd, AlmaLinux:9: cyrus-imapd-libs, AlmaLinux:9: cyrus-imapd-utils, AlmaLinux:9: perl-Cyrus

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support.

Security Fix(es):

* cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command (CVE-2024-34055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-04474 bdu:2024-04474 2026-10-07T15:41:13.427966+00:00 bdu:2024-04474 https://cve.radiocsirt.org/vuln/euvd-2026-206285 EUVD-2026-206285 2026-10-07T15:41:13.427983+00:00 EUVD-2026-206285 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34055 fkie_cve-2024-34055 2026-10-07T15:41:13.427996+00:00

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

 https://cve.radiocsirt.org/vuln/ghsa-crp5-539g-qwq6 GHSA-crp5-539g-qwq6 2026-10-07T15:41:13.428017+00:00

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14968-1 openSUSE-SU-2025:14968-1 — cyradm-3.8.4-1.1 on GA media 2026-10-07T15:41:13.428030+00:00

cyradm-3.8.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-34055 UBUNTU-CVE-2024-34055 2026-10-07T15:41:13.428047+00:00

Affected: Ubuntu:16.04:LTS: cyrus-imapd-2.4, Ubuntu:Pro:18.04:LTS: cyrus-imapd, Ubuntu:Pro:20.04:LTS: cyrus-imapd, Ubuntu:Pro:22.04:LTS: cyrus-imapd, Ubuntu:Pro:24.04:LTS: cyrus-imapd

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1291 WID-SEC-W-2024-1291 — cyrus imapd: Schwachstelle ermöglicht Denial of Service 2026-10-07T15:41:13.428070+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in cyrus imapd ausnutzen, um einen Denial of Service Angriff durchzuführen.