Cyrus vulnerabilities

Products

• Imap 14
• Sasl 4
• Imapd 3

Newest

• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An... CVE-2026-61915 Fix available 4.2 MediumSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle.... CVE-2026-61911 Fix available 4.3 MediumSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special... CVE-2026-61910 Fix available 3.5 LowSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href... CVE-2026-61909 Fix available 3.5 LowSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an... CVE-2026-61908 Fix available 3.1 LowSeptember 9, 2026
• cyrus imap, debian linux, fedoraproject fedora +2 more Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute... CVE-2021-33582 Fix available 7.5 HighSeptember 1, 2021
• cyrus imap, fedoraproject fedora +1 more Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to... CVE-2021-32056 Fix available 4.3 MediumMay 10, 2021
• cyrus imap, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8... CVE-2019-19783 Fix available 6.5 MediumDecember 16, 2019
• cyrus imap, debian linux, fedoraproject fedora +2 more Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP... CVE-2019-18928 Fix available 9.8 CriticalNovember 15, 2019
• cyrus imap, canonical ubuntu linux, debian linux +5 more +7 more The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows... CVE-2019-11356 Fix available 9.8 CriticalJune 3, 2019
• cyrus imap In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one... CVE-2017-14230 9.1 CriticalSeptember 10, 2017
• cyrus imap, opensuse leap, opensuse +2 more Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and... CVE-2015-8078 7.5 HighDecember 3, 2015
• cyrus imap, opensuse leap, opensuse +2 more Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and... CVE-2015-8077 7.5 HighDecember 3, 2015
• cyrus imap, opensuse leap, opensuse +2 more The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2... CVE-2015-8076 7.5 HighDecember 3, 2015
• cyrus imapd imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote... CVE-2011-3372 7.5 HighOctober 6, 2011
• cyrus imapd Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders... CVE-2006-2502 Public exploit EPSS 53.3% 5.1 MediumMay 22, 2006
• cyrus sasl digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and... CVE-2006-1721 Fix available 2.6 LowApril 11, 2006
• cyrus imapd Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary... CVE-2005-0546 Fix available 7.5 HighFebruary 25, 2005
• cyrus sasl, conectiva linux +1 more The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH... CVE-2004-0884 Fix available 7.2 HighOctober 12, 2004
• cyrus sasl, apple mac os x, mac os x server +4 more +6 more Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in... CVE-2005-0373 Fix available 7.5 HighOctober 7, 2004
• cyrus libsieve Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to... CVE-2002-2253 10.0 HighDecember 31, 2002
• cyrus sasl SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and... CVE-2002-2043 7.5 HighDecember 31, 2002