Cyrus Imap vulnerabilities

• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An... CVE-2026-61915 Fix available 4.2 MediumSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle.... CVE-2026-61911 Fix available 4.3 MediumSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special... CVE-2026-61910 Fix available 3.5 LowSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href... CVE-2026-61909 Fix available 3.5 LowSeptember 9, 2026
• cyrus imap, cyrusimap cyrus imap +1 more An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an... CVE-2026-61908 Fix available 3.1 LowSeptember 9, 2026
• cyrus imap, debian linux, fedoraproject fedora +2 more Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute... CVE-2021-33582 Fix available 7.5 HighSeptember 1, 2021
• cyrus imap, fedoraproject fedora +1 more Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to... CVE-2021-32056 Fix available 4.3 MediumMay 10, 2021
• cyrus imap, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8... CVE-2019-19783 Fix available 6.5 MediumDecember 16, 2019
• cyrus imap, debian linux, fedoraproject fedora +2 more Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP... CVE-2019-18928 Fix available 9.8 CriticalNovember 15, 2019
• cyrus imap, canonical ubuntu linux, debian linux +5 more +7 more The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows... CVE-2019-11356 Fix available 9.8 CriticalJune 3, 2019
• cyrus imap In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one... CVE-2017-14230 9.1 CriticalSeptember 10, 2017
• cyrus imap, opensuse leap, opensuse +2 more Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and... CVE-2015-8078 7.5 HighDecember 3, 2015
• cyrus imap, opensuse leap, opensuse +2 more Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and... CVE-2015-8077 7.5 HighDecember 3, 2015
• cyrus imap, opensuse leap, opensuse +2 more The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2... CVE-2015-8076 7.5 HighDecember 3, 2015
• cyrus imapd imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote... CVE-2011-3372 7.5 HighOctober 6, 2011
• cyrus imapd Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders... CVE-2006-2502 Public exploit EPSS 54.1% 5.1 MediumMay 22, 2006
• cyrus imapd Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary... CVE-2005-0546 Fix available 7.5 HighFebruary 25, 2005