Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-32056

Fixed in a distro release EPSS 2%

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.

Published 2021-05-10 · CVE record · OSV

Products: cyrus imap, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Debian 12cyrus-imapd3.2.6-2
Debian 13cyrus-imapd3.2.6-2
Debian 14cyrus-imapd3.2.6-2