CVE-2021-33582
Fixed in a distro release EPSS 3%
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
Products: cyrus imap, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | cyrus-imapd | 2.4.22-1.amzn2.0.1 |
| Amazon Linux 2 | cyrus-imapd-devel | 2.4.22-1.amzn2.0.1 |
| Amazon Linux 2 | cyrus-imapd-utils | 2.4.22-1.amzn2.0.1 |
| Debian 12 | cyrus-imapd | 3.4.2-1 |
| Debian 13 | cyrus-imapd | 3.4.2-1 |
| Debian 14 | cyrus-imapd | 3.4.2-1 |
| Debian 9 | cyrus-imapd | 2.5.10-3+deb9u3 |
| Red Hat Enterprise Linux 8 | cyrus-imapd | 0:3.0.7-20.el8_4.1 |
| Red Hat Enterprise Linux 8 | cyrus-imapd-debuginfo | 0:3.0.7-20.el8_4.1 |
| Red Hat Enterprise Linux 8 | cyrus-imapd-debugsource | 0:3.0.7-20.el8_4.1 |
| Red Hat Enterprise Linux 8 | cyrus-imapd-utils | 0:3.0.7-20.el8_4.1 |
| Red Hat Enterprise Linux 8 | cyrus-imapd-utils-debuginfo | 0:3.0.7-20.el8_4.1 |
| Red Hat Enterprise Linux 8 | cyrus-imapd-vzic | 0:3.0.7-20.el8_4.1 |
| Red Hat Enterprise Linux 8 | cyrus-imapd-vzic-debuginfo | 0:3.0.7-20.el8_4.1 |
| Red Hat rhel eus 8.1 | cyrus-imapd | 0:3.0.7-16.el8_1.1 |
| Red Hat rhel eus 8.1 | cyrus-imapd-debuginfo | 0:3.0.7-16.el8_1.1 |
| Red Hat rhel eus 8.1 | cyrus-imapd-debugsource | 0:3.0.7-16.el8_1.1 |
| Red Hat rhel eus 8.1 | cyrus-imapd-utils | 0:3.0.7-16.el8_1.1 |
| Red Hat rhel eus 8.1 | cyrus-imapd-utils-debuginfo | 0:3.0.7-16.el8_1.1 |
| Red Hat rhel eus 8.1 | cyrus-imapd-vzic | 0:3.0.7-16.el8_1.1 |
| Red Hat rhel eus 8.1 | cyrus-imapd-vzic-debuginfo | 0:3.0.7-16.el8_1.1 |
| Red Hat rhel eus 8.2 | cyrus-imapd | 0:3.0.7-16.el8_2.1 |
| Red Hat rhel eus 8.2 | cyrus-imapd-debuginfo | 0:3.0.7-16.el8_2.1 |
| Red Hat rhel eus 8.2 | cyrus-imapd-debugsource | 0:3.0.7-16.el8_2.1 |
| Red Hat rhel eus 8.2 | cyrus-imapd-utils | 0:3.0.7-16.el8_2.1 |
| Red Hat rhel eus 8.2 | cyrus-imapd-utils-debuginfo | 0:3.0.7-16.el8_2.1 |
| Red Hat rhel eus 8.2 | cyrus-imapd-vzic | 0:3.0.7-16.el8_2.1 |
| Red Hat rhel eus 8.2 | cyrus-imapd-vzic-debuginfo | 0:3.0.7-16.el8_2.1 |
| Rocky Linux 8 | cyrus-imapd | 0:3.0.7-20.el8_4.1 |
| Ubuntu 16.04 LTS | cyrus-imapd-2.4 | no fix |
| Ubuntu Pro 18.04 LTS | cyrus-imapd | 2.5.10-3ubuntu1.1+esm1 |
| Ubuntu Pro 20.04 LTS | cyrus-imapd | 3.0.13-5ubuntu0.1~esm1 |
| Ubuntu Pro 22.04 LTS | cyrus-imapd | 3.4.3-3ubuntu0.1+esm1 |
| Ubuntu Pro 24.04 LTS | cyrus-imapd | 3.8.2-1ubuntu0.1~esm1 |
| openSUSE Tumbleweed | cyrus-imapd | 2.4.22-2.1 |