CVE-2021-32056
Fixed in a distro release EPSS 2%
Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
Products: cyrus imap, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cyrus-imapd | 3.2.6-2 |
| Debian 13 | cyrus-imapd | 3.2.6-2 |
| Debian 14 | cyrus-imapd | 3.2.6-2 |