CVE catalog
CVE-2015-8078
UBUNTU-CVE-2015-8078
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.75% · Oct 25, 2026
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | cyrus-imapd-2.4 | 16.04 | 2.4.17+caldav~beta10-18 | vulnerable |
| Ubuntu | cyrus-imapd-2.4 | 16.04 | 2.4.17+nocaldav-2 | vulnerable |
| Ubuntu | cyrus-imapd-2.4 | 16.04 | 2.4.18-3 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: