Description
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES 12 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES 11 SP4 | cyrus-imapd | 2.3.11-60.65.67.1 | SUSE-SU-2016:1459-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES for SAP 12 | cyrus-imapd | 2.3.18-37.1 | SUSE-SU-2016:1457-1 |
| SLES for SAP 11 SP4 | cyrus-imapd | 2.3.11-60.65.67.1 | SUSE-SU-2016:1459-1 |
Advisories 2
- SUSE-SU-2016:1457-1 Security update for cyrus-imapd SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:1459-1 Security update for cyrus-imapd SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://docs.cyrus.foundation/imap/release-notes/2.3/x/2.3.19.html
- https://docs.cyrus.foundation/imap/release-notes/2.4/x/2.4.18.html
- openSUSE-SU-2015:1623 vendor-advisory
- https://docs.cyrus.foundation/imap/release-notes/2.5/x/2.5.4.html
- [oss-security] 20151104 Re: CVE request: urlfetch range handling flaw in Cyrus IMAP mailing-list
- openSUSE-SU-2015:1622 vendor-advisory
- https://cyrus.foundation/cyrus-imapd/commit/?id=07de4ff1bf2fa340b9d77b8e7de8d43d47a33921
- [oss-security] 20150930 Re: CVE request: urlfetch range handling flaw in Cyrus IMAP mailing-list
- SUSE-SU-2016:1459 vendor-advisory
- SUSE-SU-2016:1457 vendor-advisory
- [oss-security] 20150929 CVE request: urlfetch range handling flaw in Cyrus mailing-list
- https://cyrus.foundation/cyrus-imapd/commit/?id=c21e179c1f6b968fe69bebe079176714e511587b