Every CVE Search/ Get API key

CVE-2011-3481

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server...

4.3 MediumFix available

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Exploit likelihood

2.14%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Record
CVE-2011-3481
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Record
CVE-2011-3481
Updated
2026-11-02
EUVDEUVD-2011-3444 No score

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Record
EUVD-2011-3444
Updated
2026-11-03
GitHub AdvisoriesGHSA-6h43-3p3w-2945 No score

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server...

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Record
GHSA-6h43-3p3w-2945
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cyrus-imapd-2.2
Debian:5.0
 before 2.2.13-14+lenny6, plus listed versions
2.2.13-142.2.13-14+lenny12.2.13-14+lenny32.2.13-14+lenny42.2.13-14+lenny5
2.2.13-14+lenny6
cyrus-imapd-2.2
Debian:6.0
 before 2.2.13-19+squeeze3, plus listed versions
2.2.13-192.2.13-19+squeeze12.2.13-19+squeeze2
2.2.13-19+squeeze3
cyrus-imapd
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
perl-Cyrus
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
Show 34 moreShow less
Affected packages
PackageAffectedFixed
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
perl-Cyrus
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
perl-Cyrus
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
perl-Cyrus
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-17.el4
0:2.2.12-17.el4
cyrus-imapd
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-perl
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-utils
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-devel
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-perl
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd-utils
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.2
0:2.3.7-12.el5_7.2
cyrus-imapd
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.4
0:2.3.16-6.el6_1.4
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.4
0:2.3.16-6.el6_1.4
cyrus-imapd-utils
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.4
0:2.3.16-6.el6_1.4
cyrus-imapd-devel
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.4
0:2.3.16-6.el6_1.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-3481 is a medium vulnerability (CVSS 4.3) in Cmu Cyrus Imap Server, published September 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.14%, the 82nd percentile. Fixed in cyrus-imapd-2.2 2.2.13-14+lenny6.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open