Candidate: CVE-2015-8077
PublicDate: 2015-12-03 20:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8077
Description:
 Integer overflow in the index_urlfetch function in imap/index.c in Cyrus
 IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified
 impact via vectors related to urlfetch range checks and the start_octet
 variable.  NOTE: this vulnerability exists because of an incomplete fix for
 CVE-2015-8076.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_cyrus-imapd-2.4:
 upstream: https://cyrus.foundation/cyrus-imapd/commit/?id=745e161c834f1eb6d62fc14477f51dae799e1e08
upstream_cyrus-imapd-2.4: released (2.4.18-4)
precise_cyrus-imapd-2.4: ignored (reached end-of-life)
precise/esm_cyrus-imapd-2.4: DNE (precise was needs-triage)
trusty_cyrus-imapd-2.4: ignored (reached end-of-life)
trusty/esm_cyrus-imapd-2.4: DNE (trusty was needed)
vivid_cyrus-imapd-2.4: ignored (reached end-of-life)
vivid/stable-phone-overlay_cyrus-imapd-2.4: DNE
vivid/ubuntu-core_cyrus-imapd-2.4: DNE
wily_cyrus-imapd-2.4: ignored (reached end-of-life)
xenial_cyrus-imapd-2.4: ignored (end of standard support, was needed)
yakkety_cyrus-imapd-2.4: DNE
zesty_cyrus-imapd-2.4: DNE
artful_cyrus-imapd-2.4: DNE
bionic_cyrus-imapd-2.4: DNE
cosmic_cyrus-imapd-2.4: DNE
disco_cyrus-imapd-2.4: DNE
eoan_cyrus-imapd-2.4: DNE
focal_cyrus-imapd-2.4: DNE
groovy_cyrus-imapd-2.4: DNE
hirsute_cyrus-imapd-2.4: DNE
impish_cyrus-imapd-2.4: DNE
jammy_cyrus-imapd-2.4: DNE
devel_cyrus-imapd-2.4: DNE

Patches_cyrus-imapd:
 upstream: https://cyrus.foundation/cyrus-imapd/commit/?id=745e161c834f1eb6d62fc14477f51dae799e1e08
upstream_cyrus-imapd: released (2.5.7)
precise_cyrus-imapd: DNE
precise/esm_cyrus-imapd: DNE
trusty_cyrus-imapd: DNE
trusty/esm_cyrus-imapd: DNE
vivid_cyrus-imapd: ignored (reached end-of-life)
vivid/stable-phone-overlay_cyrus-imapd: DNE
vivid/ubuntu-core_cyrus-imapd: DNE
wily_cyrus-imapd: DNE
xenial_cyrus-imapd: DNE
yakkety_cyrus-imapd: not-affected (2.5.8-1)
zesty_cyrus-imapd: not-affected (2.5.8-1)
artful_cyrus-imapd: not-affected (2.5.8-1)
bionic_cyrus-imapd: not-affected (2.5.8-1)
cosmic_cyrus-imapd: not-affected (2.5.8-1)
disco_cyrus-imapd: not-affected (2.5.8-1)
eoan_cyrus-imapd: not-affected (2.5.8-1)
focal_cyrus-imapd: not-affected (2.5.8-1)
groovy_cyrus-imapd: not-affected (2.5.8-1)
hirsute_cyrus-imapd: not-affected (2.5.8-1)
impish_cyrus-imapd: not-affected (2.5.8-1)
jammy_cyrus-imapd: not-affected (2.5.8-1)
devel_cyrus-imapd: not-affected (2.5.8-1)