Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8078

Опубликовано: 03 дек. 2015
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:cyrus:imap:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.2:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.3:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.4:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.5:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.6:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.7:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.8:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.9:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.10:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.11:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.12:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.13:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.14:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.15:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.16:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.17:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.3.18:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.8:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.9:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.10:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.11:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.12:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.13:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.14:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.15:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.16:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.4.17:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:imap:2.5.3:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00814
Низкий

7.5 High

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu логотип

CVE-2015-8078

ubuntu
около 10 лет назад

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

redhat логотип

CVE-2015-8078

redhat
больше 10 лет назад

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

debian логотип

CVE-2015-8078

debian
около 10 лет назад

Integer overflow in the index_urlfetch function in imap/index.c in Cyr ...

github логотип

GHSA-5pfc-g3f2-6263

github
больше 3 лет назад

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

fstec логотип

BDU:2016-00364

fstec
около 10 лет назад

Уязвимость почтового сервера Cyrus IMAP и операционных систем openSUSE и OpenSUSE Leap, позволяющая нарушителю нарушить целостность и доступность защищаемой информации

EPSS

Процентиль: 74%
0.00814
Низкий

7.5 High

CVSS2

Дефекты

CWE-189