NVD

Id
28420  
Name
CVE-2015-8077  
Description
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the start_octet variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-12-03  
Modified Date
2016-12-07  
Seq
2015-8077  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149428 28420 CVE-2015-8077 SUSE-SU-2016:1457  View
149429 28420 CVE-2015-8077 SUSE-SU-2016:1459  View
149430 28420 CVE-2015-8077 openSUSE-SU-2015:2130  View
149431 28420 CVE-2015-8077 openSUSE-SU-2015:2200  View
149432 28420 CVE-2015-8077 [oss-security] 20150930 Re: CVE request: urlfetch range handling flaw in Cyrus IMAP  View
149433 28420 CVE-2015-8077 [oss-security] 20151104 Re: CVE request: urlfetch range handling flaw in Cyrus IMAP  View
149434 28420 CVE-2015-8077 https://cyrus.foundation/cyrus-imapd/commit/?id=745e161c834f1eb6d62fc14477f51dae799e1e08  View
149435 28420 CVE-2015-8077 https://docs.cyrus.foundation/imap/release-notes/2.5/x/2.5.7.html  View
149436 28420 CVE-2015-8077 [Cyrus-devel] 20151005 Recent security fixes  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10762 JVNDB-2015-006082 Cyrus IMAP の imap/index.c の index_urlfetch 関数における整数オーバーフローの脆弱性 Cyrus IMAP の imap/index.c の index_urlfetch 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2015-8077 85302 CVE-2015-8077 28420 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006082.html 2015-10-26 2015-12-07 View