ALT-PU-2021-1975

Низкий

ALT-PU-2021-1975: package cyrus-imapd update to version 3.2.7-alt1

Источник

errata.altlinux.org

Дата публикации

10.06.2021

Дата обновления

10.06.2021

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades cyrus-imapd to version 3.2.7-alt1.

Устраненные уязвимости2

BDU:2021-04683

Средний 4.3

Дата публикации: 20.09.2021

Уязвимость аннотации сервера почтового сервера Cyrus IMAP, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Средний 4.3

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: Low

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

BDU:2021-04683 https://bdu.fstec.ru/vul/2021-04683

Ссылки1

ALT-PU-2021-1975 https://errata.altlinux.org/ALT-PU-2021-1975

Связанные уязвимости

CVE-2021-32056

CVSS3: 4.3

ubuntu

больше 5 лет назад

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.

CVE-2021-32056

CVSS3: 4.3

redhat

больше 5 лет назад

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.

CVE-2021-32056

CVSS3: 4.3

nvd

больше 5 лет назад

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.

CVE-2021-32056

CVSS3: 4.3

debian

больше 5 лет назад

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remo ...

GHSA-v3j8-2g92-h2q8

CVSS3: 4.3

github

больше 4 лет назад

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.