CVE-2024-34055

Description

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

Reserved 2024-04-30 | Published 2024-06-05 | Updated 2024-12-06 | Assigner mitre

References

github.com/...ommit/ef9e4e8314d6a06f2269af0ccf606894cc3fe489

www.cyrusimap.org/...download/release-notes/3.8/x/3.8.3.html

www.cyrusimap.org/...ad/release-notes/3.10/x/3.10.0-rc1.html

lists.fedoraproject.org/...CJZQAE3XC2GBCE5KSTWJ5A6QYANFWGFB/ (FEDORA-2024-f3e0255c75) vendor-advisory

lists.fedoraproject.org/...WVZHUZDU4MGTTZJRNACTMSKXLNMMRLJ6/ (FEDORA-2024-123f2b3666) vendor-advisory

cve.org (CVE-2024-34055)

nvd.nist.gov (CVE-2024-34055)

Download JSON