Most recent entries from all

ALSA-2024:9195 — Moderate: cyrus-imapd security update

Affected: AlmaLinux:9: cyrus-imapd, AlmaLinux:9: cyrus-imapd-libs, AlmaLinux:9: cyrus-imapd-utils, AlmaLinux:9: perl-Cyrus

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support.

Security Fix(es):

* cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command (CVE-2024-34055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-04474

EUVD-2026-206285

fkie_cve-2024-34055

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

GHSA-crp5-539g-qwq6

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

openSUSE-SU-2025:14968-1 — cyradm-3.8.4-1.1 on GA media

cyradm-3.8.4-1.1 on GA media

UBUNTU-CVE-2024-34055

Affected: Ubuntu:16.04:LTS: cyrus-imapd-2.4, Ubuntu:Pro:18.04:LTS: cyrus-imapd, Ubuntu:Pro:20.04:LTS: cyrus-imapd, Ubuntu:Pro:22.04:LTS: cyrus-imapd, Ubuntu:Pro:24.04:LTS: cyrus-imapd

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

WID-SEC-W-2024-1291 — cyrus imapd: Schwachstelle ermöglicht Denial of Service

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in cyrus imapd ausnutzen, um einen Denial of Service Angriff durchzuführen.