CVEvulnerability

CVE-2011-3481

4.3 MEDIUM Published 2011-09-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-09-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Affected configurations

• cmu cyrus imap server (<= 2.4.10) • cmu cyrus imap server 2.0.17 • cmu cyrus imap server 2.1.16 • cmu cyrus imap server 2.1.17 • cmu cyrus imap server 2.1.18 • cmu cyrus imap server 2.2.8 • cmu cyrus imap server 2.2.9 • cmu cyrus imap server 2.2.10 • cmu cyrus imap server 2.2.11 • cmu cyrus imap server 2.2.12 • cmu cyrus imap server 2.2.13 • cmu cyrus imap server 2.2.13p1 • cmu cyrus imap server 2.3.0 • cmu cyrus imap server 2.3.1 • cmu cyrus imap server 2.3.2 • cmu cyrus imap server 2.3.3 • cmu cyrus imap server 2.3.4 • cmu cyrus imap server 2.3.5 • cmu cyrus imap server 2.3.6 • cmu cyrus imap server 2.3.7 • cmu cyrus imap server 2.3.8 • cmu cyrus imap server 2.3.9 • cmu cyrus imap server 2.3.10 • cmu cyrus imap server 2.3.11 • cmu cyrus imap server 2.3.12 • cmu cyrus imap server 2.3.13 • cmu cyrus imap server 2.3.14 • cmu cyrus imap server 2.3.15 • cmu cyrus imap server 2.3.16 • cmu cyrus imap server 2.3.17 • cmu cyrus imap server 2.4.0 • cmu cyrus imap server 2.4.1 • cmu cyrus imap server 2.4.2 • cmu cyrus imap server 2.4.3 • cmu cyrus imap server 2.4.4 • cmu cyrus imap server 2.4.5 • cmu cyrus imap server 2.4.6 • cmu cyrus imap server 2.4.7 • cmu cyrus imap server 2.4.8 • cmu cyrus imap server 2.4.9

References