Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Leap | Opensuse | 42.1 (including) | 42.1 (including) |
| Opensuse | Opensuse | 13.2 (including) | 13.2 (including) |