CVE-2015-8076 Information disclosure in n/a
Remote attackers can obtain sensitive information via an out-of-bounds heap read in Cyrus IMAP's urlfetch function.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-8076?
CVE-2015-8076 is a high-severity vulnerability in Opensuse Leap, published on 3 Dec 2015. It can be exploited over the network, with no action from the victim.
Official description
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read.
Which versions are affected by CVE-2015-8076?
It affects 3 products.
Products include Cyrus Imap, Opensuse Leap, Opensuse Opensuse.
How do I fix CVE-2015-8076?
Upgrade to a fixed version.
Is CVE-2015-8076 being exploited?
There is no known exploitation of CVE-2015-8076 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Leap
Sources
Also known as GHSA-fxwg-gpw8-9wrp.