NVD

Id
28419  
Name
CVE-2015-8076  
Description
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-12-03  
Modified Date
2016-11-29  
Seq
2015-8076  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149416 28419 CVE-2015-8076 SUSE-SU-2016:1457  View
149417 28419 CVE-2015-8076 SUSE-SU-2016:1459  View
149418 28419 CVE-2015-8076 openSUSE-SU-2015:1622  View
149419 28419 CVE-2015-8076 openSUSE-SU-2015:1623  View
149420 28419 CVE-2015-8076 [oss-security] 20150929 CVE request: urlfetch range handling flaw in Cyrus  View
149421 28419 CVE-2015-8076 [oss-security] 20150930 Re: CVE request: urlfetch range handling flaw in Cyrus IMAP  View
149422 28419 CVE-2015-8076 [oss-security] 20151104 Re: CVE request: urlfetch range handling flaw in Cyrus IMAP  View
149423 28419 CVE-2015-8076 https://cyrus.foundation/cyrus-imapd/commit/?id=07de4ff1bf2fa340b9d77b8e7de8d43d47a33921  View
149424 28419 CVE-2015-8076 https://cyrus.foundation/cyrus-imapd/commit/?id=c21e179c1f6b968fe69bebe079176714e511587b  View
149425 28419 CVE-2015-8076 https://docs.cyrus.foundation/imap/release-notes/2.3/x/2.3.19.html  View
149426 28419 CVE-2015-8076 https://docs.cyrus.foundation/imap/release-notes/2.4/x/2.4.18.html  View
149427 28419 CVE-2015-8076 https://docs.cyrus.foundation/imap/release-notes/2.5/x/2.5.4.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10761 JVNDB-2015-006081 Cyrus IMAP の index.c の index_urlfetch 関数における重要な情報を取得される脆弱性 Cyrus IMAP の index.c の index_urlfetch 関数には、重要な情報を取得されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-8076 85301 CVE-2015-8076 28419 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006081.html 2015-09-24 2015-12-07 View