CVE-2024-34055

Published: Jun 5, 2024

Modified: Dec 6, 2024

PUBLISHED

Description

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/cyrusimap/cyrus-imapd/commit/ef9e4e8314d6a06f2269af0ccf606894cc3fe489

https://www.cyrusimap.org/imap/download/release-notes/3.8/x/3.8.3.html

https://www.cyrusimap.org/dev/imap/download/release-notes/3.10/x/3.10.0-rc1.html

FEDORA-2024-f3e0255c75

vendor-advisory

FEDORA-2024-123f2b3666

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-34055

Description

Affected Products

References