PT-2015-3149 · Cyrus+2 · Cyrus Imap+2

Published 2015-07-11 · Updated 2024-06-15 · CVE-2015-8078

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions 2.3.19 through 2.5.6

Description The issue is caused by an integer overflow in the index urlfetch function in imap/index.c, which can be exploited by remote attackers to have an unspecified impact. This is related to urlfetch range checks and the section offset variable. The vulnerability exists due to an incomplete fix for a previous issue.

Recommendations For versions 2.3.19, 2.4.18, and 2.5.6, consider disabling the index urlfetch function as a temporary workaround until a patch is available. Restrict access to the imap/index.c module to minimize the risk of exploitation. Avoid using the section offset variable in the affected urlfetch range checks until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2015-1604

ALT-PU-2015-2092

BDU:2016-00364

CVE-2015-8078

MGASA-2016-0045

OPENSUSE-SU-2024:10015-1

SUSE-SU-2016:1457-1

SUSE-SU-2016:1459-1

Affected Products

Alt Linux

Cyrus Imap

Suse

References · 39

• https://errata.altlinux.org/ALT-PU-2015-2092 · Vendor Advisory
• https://docs.cyrus.foundation/imap/release-notes/2.5/x/2.5.7.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1459-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8078 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10015-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0045.html · Security Note
• https://bdu.fstec.ru/vul/2016-00363 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8077 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8078 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8076 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:1457-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8078 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1604 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0045 · Vendor Advisory