Summary
[3.0.7-15.1]
- Resolves: #1718194 - don't overrun buffer when parsing strings with sscanf()
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cyrus-imapd | 0:3.0.7-15.el8_0.1 |
| Oracle Linux · 8 | cyrus-imapd-utils | 0:3.0.7-15.el8_0.1 |
| Oracle Linux · 8 | cyrus-imapd-vzic | 0:3.0.7-15.el8_0.1 |
Vulnerabilities 1
-
Unscored —
The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execu…