CVE-2015-8076
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.
La función index_urlfetch en index.c en Cyrus IMAP 2.3.x en versiones anteriores a 2.3.19, 2.4.x en versiones anteriores a 2.4.18, 2.5.x en versiones anteriores a 2.5.4 permite a atacantes remotos obtener información sensible o posiblemente tener otro impacto no especificado a través de vectores relacionados con el intervalo urlfetch, lo que desencadena una lectura de memoria dinámica fuera de rango.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-11-04 CVE Reserved
- 2015-12-03 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2015/09/29/2 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2015/09/30/3 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2015/11/04/3 | Mailing List |
|
| https://cyrus.foundation/cyrus-imapd/commit/?id=07de4ff1bf2fa340b9d77b8e7de8d43d47a33921 | X_refsource_confirm | |
| https://docs.cyrus.foundation/imap/release-notes/2.3/x/2.3.19.html | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 42.1 Search vendor "Opensuse" for product "Leap" and version "42.1" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 13.2 Search vendor "Opensuse" for product "Opensuse" and version "13.2" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.0 Search vendor "Cyrus" for product "Imap" and version "2.3.0" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.1 Search vendor "Cyrus" for product "Imap" and version "2.3.1" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.2 Search vendor "Cyrus" for product "Imap" and version "2.3.2" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.3 Search vendor "Cyrus" for product "Imap" and version "2.3.3" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.4 Search vendor "Cyrus" for product "Imap" and version "2.3.4" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.5 Search vendor "Cyrus" for product "Imap" and version "2.3.5" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.6 Search vendor "Cyrus" for product "Imap" and version "2.3.6" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.7 Search vendor "Cyrus" for product "Imap" and version "2.3.7" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.8 Search vendor "Cyrus" for product "Imap" and version "2.3.8" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.9 Search vendor "Cyrus" for product "Imap" and version "2.3.9" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.10 Search vendor "Cyrus" for product "Imap" and version "2.3.10" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.11 Search vendor "Cyrus" for product "Imap" and version "2.3.11" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.12 Search vendor "Cyrus" for product "Imap" and version "2.3.12" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.13 Search vendor "Cyrus" for product "Imap" and version "2.3.13" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.14 Search vendor "Cyrus" for product "Imap" and version "2.3.14" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.15 Search vendor "Cyrus" for product "Imap" and version "2.3.15" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.16 Search vendor "Cyrus" for product "Imap" and version "2.3.16" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.17 Search vendor "Cyrus" for product "Imap" and version "2.3.17" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.3.18 Search vendor "Cyrus" for product "Imap" and version "2.3.18" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.0 Search vendor "Cyrus" for product "Imap" and version "2.4.0" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.1 Search vendor "Cyrus" for product "Imap" and version "2.4.1" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.2 Search vendor "Cyrus" for product "Imap" and version "2.4.2" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.3 Search vendor "Cyrus" for product "Imap" and version "2.4.3" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.4 Search vendor "Cyrus" for product "Imap" and version "2.4.4" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.5 Search vendor "Cyrus" for product "Imap" and version "2.4.5" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.6 Search vendor "Cyrus" for product "Imap" and version "2.4.6" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.7 Search vendor "Cyrus" for product "Imap" and version "2.4.7" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.8 Search vendor "Cyrus" for product "Imap" and version "2.4.8" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.9 Search vendor "Cyrus" for product "Imap" and version "2.4.9" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.10 Search vendor "Cyrus" for product "Imap" and version "2.4.10" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.11 Search vendor "Cyrus" for product "Imap" and version "2.4.11" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.12 Search vendor "Cyrus" for product "Imap" and version "2.4.12" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.13 Search vendor "Cyrus" for product "Imap" and version "2.4.13" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.14 Search vendor "Cyrus" for product "Imap" and version "2.4.14" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.15 Search vendor "Cyrus" for product "Imap" and version "2.4.15" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.16 Search vendor "Cyrus" for product "Imap" and version "2.4.16" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.4.17 Search vendor "Cyrus" for product "Imap" and version "2.4.17" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.5.0 Search vendor "Cyrus" for product "Imap" and version "2.5.0" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.5.1 Search vendor "Cyrus" for product "Imap" and version "2.5.1" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.5.2 Search vendor "Cyrus" for product "Imap" and version "2.5.2" | - |
Affected
| ||||||
| Cyrus Search vendor "Cyrus" | Imap Search vendor "Cyrus" for product "Imap" | 2.5.3 Search vendor "Cyrus" for product "Imap" and version "2.5.3" | - |
Affected
| ||||||