Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "cyrus-admin", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-caldav", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-caldav-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-clients", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-clients-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-common", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-common-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-dev", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-doc", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-imapd", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-imapd-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-murder", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-murder-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-nntpd", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-nntpd-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-pop3d", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-pop3d-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-replication", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "cyrus-replication-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "libcyrus-imap-perl", "binary_version": "2.5.10-3ubuntu1.1+esm1" }, { "binary_name": "libcyrus-imap-perl-dbgsym", "binary_version": "2.5.10-3ubuntu1.1+esm1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "cyrus-admin", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-caldav", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-caldav-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-clients", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-clients-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-common", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-common-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-dev", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-doc", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-imapd", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-imapd-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-murder", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-murder-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-nntpd", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-nntpd-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-pop3d", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-pop3d-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-replication", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "cyrus-replication-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "libcyrus-imap-perl", "binary_version": "3.0.13-5ubuntu0.1~esm1" }, { "binary_name": "libcyrus-imap-perl-dbgsym", "binary_version": "3.0.13-5ubuntu0.1~esm1" } ] }