Unrated severityNVD Advisory· Published Dec 3, 2015· Updated May 6, 2026
CVE-2015-8076
CVE-2015-8076
Description
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.
Affected products
43cpe:2.3:a:cyrus:imap:2.3.14:*:*:*:*:*:*:*+ 40 more
- cpe:2.3:a:cyrus:imap:2.3.14:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.15:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.16:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.17:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.18:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.3.13:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.12:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.13:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.14:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.15:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.16:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.17:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:cyrus:imap:2.5.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- cyrus.foundation/cyrus-imapd/commit/nvdVendor Advisory
- docs.cyrus.foundation/imap/release-notes/2.4/x/2.4.18.htmlnvdVendor Advisory
- docs.cyrus.foundation/imap/release-notes/2.5/x/2.5.4.htmlnvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.htmlnvd
- lists.opensuse.org/opensuse-updates/2015-09/msg00037.htmlnvd
- lists.opensuse.org/opensuse-updates/2015-09/msg00038.htmlnvd
- www.openwall.com/lists/oss-security/2015/09/29/2nvd
- www.openwall.com/lists/oss-security/2015/09/30/3nvd
- www.openwall.com/lists/oss-security/2015/11/04/3nvd
- cyrus.foundation/cyrus-imapd/commit/nvd
- docs.cyrus.foundation/imap/release-notes/2.3/x/2.3.19.htmlnvd
News mentions
0No linked articles in our index yet.