CVE-2015-8076: Buffer Overflow
The indexurlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8076?
CVE-2015-8076 is rated as medium severity due to the potential for information disclosure.
How do I fix CVE-2015-8076?
To fix CVE-2015-8076, update Cyrus IMAP to version 2.3.19, 2.4.18, or 2.5.4 or later.
What systems are affected by CVE-2015-8076?
CVE-2015-8076 affects Cyrus IMAP versions prior to 2.3.19, 2.4.18, and 2.5.4.
Can CVE-2015-8076 be exploited remotely?
Yes, CVE-2015-8076 can be exploited by remote attackers through specific vectors related to the urlfetch range.
What impact does CVE-2015-8076 have on my system?
CVE-2015-8076 may lead to sensitive information leakage or unspecified impact due to out-of-bounds heap reads.