CVE-2024-34055

June 5, 2024, 12:53 p.m.

Product(s) Impacted

Cyrus IMAP

  • before 3.8.3
  • 3.10.x before 3.10.0-rc1

Description

Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

Weaknesses

Date

Published: June 5, 2024, 5:15 a.m.

Last Modified: June 5, 2024, 12:53 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References