Summary
The Cyrus IMAP server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contacts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols.
Security Fix(es):
* cyrus-imapd: Denial of service via string hashing algorithm collisions (CVE-2021-33582)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | cyrus-imapd | 0:3.0.7-20.el8_4.1 |
Vulnerabilities 1
-
Unscored —
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input th…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1993232