| Package | Affected versions | Patched versions |
|---|---|---|
| cyrus imap server | = 2.0.17= 2.1.16= 2.1.17= 2.1.18= 2.2.10= 2.2.11= 2.2.12= 2.2.13= 2.2.13p1= 2.2.8= 2.2.9= 2.3.0= 2.3.1= 2.3.10= 2.3.11= 2.3.12= 2.3.13= 2.3.14= 2.3.15= 2.3.16= 2.3.17= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.3.6= 2.3.7= 2.3.8= 2.3.9= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9≤ 2.4.10 |
The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free