PT-2017-13311
CVE-2017-14230
·
تاريخ النشر
2017-09-10
·
تاريخ التحديث
2018-08-28
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Cyrus IMAP versions prior to 3.0.4
Description
The issue is related to an off-by-one error in the
mboxlist do find function, which can cause the use of uninitialized memory. This might allow remote attackers to obtain sensitive information or cause a denial of service, resulting in a daemon crash. The error is triggered by a specific command, 'LIST "" "Other Users"'.Recommendations
For versions prior to 3.0.4, update to version 3.0.4 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾