Homepage

Resource Exhaustion The advisory has been revoked - it doesn't affect any version of package cyrus-imapd-debugsource  (opens in a new tab)

Threat Intelligence

EPSS
3.1% (87th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL8-CYRUSIMAPDDEBUGSOURCE-1579501
  • published1 Sept 2021
  • disclosed1 Sept 2021
Report a new vulnerability Found a mistake?

Introduced: 1 Sep 2021

CVE-2021-33582  (opens in a new tab)
CWE-400  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream cyrus-imapd-debugsource package and not the cyrus-imapd-debugsource package as distributed by RHEL.

Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.

References