Unscored USN-4160-1 1 CVE

uw-imap vulnerability

Published Oct 21, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that UW IMAP incorrectly handled inputs. A remote attacker
could possibly use this issue to execute arbitrary OS commands.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	uw-imap	8:2007f~dfsg-4+deb8u1build0.16.04.1
Ubuntu · 18.04 LTS 18.04:LTS	uw-imap	8:2007f~dfsg-5ubuntu0.18.04.2

Vulnerabilities 1

Unscored —

CVE-2018-19518 Public exploit EPSS 96%

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh …

php7.0 php7.2 php7 uw-imap Debian Ubuntu Azure Linux Alpine

Nov 25, 2018

References

report
https://ubuntu.com/security/CVE-2018-19518