Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-admin" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-caldav" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-caldav-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-clients" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-clients-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-common" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-common-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-dev" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-doc" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-imapd" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-imapd-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-murder" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-murder-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-nntpd" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-nntpd-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-pop3d" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-pop3d-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-replication" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "cyrus-replication-dbgsym" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "libcyrus-imap-perl" }, { "binary_version": "2.5.10-3ubuntu1.1+esm1", "binary_name": "libcyrus-imap-perl-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-admin" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-caldav" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-caldav-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-clients" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-clients-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-common" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-common-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-dev" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-doc" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-imapd" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-imapd-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-murder" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-murder-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-nntpd" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-nntpd-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-pop3d" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-pop3d-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-replication" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "cyrus-replication-dbgsym" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "libcyrus-imap-perl" }, { "binary_version": "3.0.13-5ubuntu0.1~esm1", "binary_name": "libcyrus-imap-perl-dbgsym" } ] }