CVE-2011-3481

Опубликовано: 14 сент. 2011

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Комментарий

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cmu:cyrus_imap_server:*:*:*:*:*:*:*:*

Версия до 2.4.10 (включая)

cpe:2.3:a:cmu:cyrus_imap_server:2.0.17:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.1.16:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.1.17:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.1.18:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.10:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.11:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.12:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.13:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.13p1:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.6:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.7:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.8:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.9:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.10:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.11:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.12:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.13:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.14:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.15:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.16:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.17:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.2:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.3:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.4:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.5:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.6:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.7:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.8:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.9:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01138

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2011-3481

ubuntu

около 14 лет назад

CVE-2011-3481

redhat

почти 20 лет назад

CVE-2011-3481

debian

около 14 лет назад

The index_get_ids function in index.c in imapd in Cyrus IMAP Server be ...

GHSA-6h43-3p3w-2945

github

больше 3 лет назад

ELSA-2011-1508

oracle-oval

почти 14 лет назад

ELSA-2011-1508: cyrus-imapd security update (MODERATE)

EPSS

Процентиль: 78%

0.01138

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other