2021-09-25
ALT-BU-2021-4226-1
Branch p8 update bulletin.
Package cyrus-imapd updated to version 2.5.17-alt0.M80P.2 for branch p8 in task 284610.
Closed vulnerabilities
Published: 2021-09-01
BDU:2022-01804
Уязвимость почтового сервера Cyrus IMAP, связанная с использованием криптографических алгоритмов, содержащих дефекты, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2021-09-01
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2021-33582
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- https://cyrus.topicbox.com/groups/announce/T3dde0a2352462975-M1386fc44adf967e072f8df13/cyrus-imap-3-4-2-3-2-8-and-3-0-16-released
- https://cyrus.topicbox.com/groups/announce/T3dde0a2352462975-M1386fc44adf967e072f8df13/cyrus-imap-3-4-2-3-2-8-and-3-0-16-released
- https://github.com/cyrusimap/cyrus-imapd/commits/master
- https://github.com/cyrusimap/cyrus-imapd/commits/master
- https://github.com/cyrusimap/cyrus-imapd/security/advisories
- https://github.com/cyrusimap/cyrus-imapd/security/advisories
- [debian-lts-announce] 20220619 [SECURITY] [DLA 3052-1] cyrus-imapd security update
- [debian-lts-announce] 20220619 [SECURITY] [DLA 3052-1] cyrus-imapd security update
- FEDORA-2022-d45bcc5447
- FEDORA-2022-d45bcc5447
- FEDORA-2022-c30b1a8aa3
- FEDORA-2022-c30b1a8aa3
- https://www.cyrusimap.org/imap/download/release-notes/index.html
- https://www.cyrusimap.org/imap/download/release-notes/index.html