CVE-2015-8078

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via…

published December 3, 2015

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02753 · 86.0th percentile
Published
2015-12-03T20:00Z
EPSS history
Timeline
  • 03 DEC 20:00Z
    Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via…
    cvelistv5