← Back

CVE-2015-8077

nvd nist
Published: Dec 3, 2015Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the start_octet variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

Affected (43)

Products: Cyrus: Imap · Opensuse: Leap, Opensuse
Cyrus
1 product
Imap
Opensuse
2 products
Leap
Opensuse
Configuration A
41 vulnerable
Vulnerable SoftwareAffected Versions
Cyrus
Imap
Version 2.3.0
Imap
Version 2.3.10
Imap
Version 2.3.11
Imap
Version 2.3.12
Imap
Version 2.3.13
Imap
Version 2.3.14
Imap
Version 2.3.15
Imap
Version 2.3.16
Imap
Version 2.3.17
Imap
Version 2.3.18
Imap
Version 2.3.1
Imap
Version 2.3.2
Imap
Version 2.3.3
Imap
Version 2.3.4
Imap
Version 2.3.5
Imap
Version 2.3.6
Imap
Version 2.3.7
Imap
Version 2.3.8
Imap
Version 2.3.9
Imap
Version 2.4.0
Imap
Version 2.4.10
Imap
Version 2.4.11
Imap
Version 2.4.12
Imap
Version 2.4.13
Imap
Version 2.4.14
Imap
Version 2.4.15
Imap
Version 2.4.16
Imap
Version 2.4.17
Imap
Version 2.4.1
Imap
Version 2.4.2
Imap
Version 2.4.3
Imap
Version 2.4.4
Imap
Version 2.4.5
Imap
Version 2.4.6
Imap
Version 2.4.7
Imap
Version 2.4.8
Imap
Version 2.4.9
Imap
Version 2.5.0
Imap
Version 2.5.1
Imap
Version 2.5.2
Imap
Version 2.5.3
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Leap
Version 42.1
Opensuse
Version 13.2

Related CWEs

CWE-189
CWE-189

References (20)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.