CVE-2024-34055 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CISA-ADP	ADP	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 67%

Vendor	Product	Version
cyrusimap	cyrus_imap	𝑥 < 3.8.3
cyrusimap	cyrus_imap	3.10.0:alpha0
cyrusimap	cyrus_imap	3.10.0:beta1
cyrusimap	cyrus_imap	3.10.0:beta2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

cyrus-imapd

bullseye	ignored
buster	ignored
bullseye (security)	vulnerable
bookworm	3.6.1-4+deb12u3 fixed
bookworm (security)	3.6.1-4+deb12u2 fixed
trixie	3.10.2-1 fixed
forky	3.12.1-2 fixed
sid	3.12.1-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

cyrus-imapd-2.4

questing	dne
plucky	dne
oracular	dne
noble	dne
mantic	dne
jammy	dne
focal	dne
xenial	ignored

cyrus-imapd

questing	not-affected
plucky	not-affected
oracular	not-affected
noble	Fixed 3.8.2-1ubuntu0.1~esm1 released
mantic	ignored
jammy	Fixed 3.4.3-3ubuntu0.1+esm1 released
focal	ignored
bionic	ignored

Common Weakness Enumeration

CWE-770 - Allocation of Resources Without Limits or Throttling
The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References

https://github.com/cyrusimap/cyrus-imapd/commit/ef9e4e8314d6a06f2269af0ccf606894cc3fe489

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJZQAE3XC2GBCE5KSTWJ5A6QYANFWGFB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVZHUZDU4MGTTZJRNACTMSKXLNMMRLJ6/

https://www.cyrusimap.org/dev/imap/download/release-notes/3.10/x/3.10.0-rc1.html

https://www.cyrusimap.org/imap/download/release-notes/3.8/x/3.8.3.html

https://github.com/cyrusimap/cyrus-imapd/commit/ef9e4e8314d6a06f2269af0ccf606894cc3fe489

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJZQAE3XC2GBCE5KSTWJ5A6QYANFWGFB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVZHUZDU4MGTTZJRNACTMSKXLNMMRLJ6/

https://www.cyrusimap.org/dev/imap/download/release-notes/3.10/x/3.10.0-rc1.html

https://www.cyrusimap.org/imap/download/release-notes/3.8/x/3.8.3.html