CVE-2024-34055

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a...

Original description

The description as published by the source.

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-34055 cyrus-imapd

References

advisory github.com
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory nvd.nist.gov
patch github.com
web cyrusimap.org
web cyrusimap.org