CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11356

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.229

EPSS Ranking 95.7%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-11356

Cyrus » Imap » Version: 2.5.0

cpe:2.3:a:cyrus:imap:2.5.0
Cyrus » Imap » Version: 2.5.1

cpe:2.3:a:cyrus:imap:2.5.1
Cyrus » Imap » Version: 2.5.10

cpe:2.3:a:cyrus:imap:2.5.10
Cyrus » Imap » Version: 2.5.11

cpe:2.3:a:cyrus:imap:2.5.11
Cyrus » Imap » Version: 2.5.12

cpe:2.3:a:cyrus:imap:2.5.12
Cyrus » Imap » Version: 2.5.2

cpe:2.3:a:cyrus:imap:2.5.2
Cyrus » Imap » Version: 2.5.3

cpe:2.3:a:cyrus:imap:2.5.3
Cyrus » Imap » Version: 2.5.4

cpe:2.3:a:cyrus:imap:2.5.4
Cyrus » Imap » Version: 2.5.5

cpe:2.3:a:cyrus:imap:2.5.5
Cyrus » Imap » Version: 2.5.6

cpe:2.3:a:cyrus:imap:2.5.6
Cyrus » Imap » Version: 2.5.7

cpe:2.3:a:cyrus:imap:2.5.7
Cyrus » Imap » Version: 2.5.8

cpe:2.3:a:cyrus:imap:2.5.8
Cyrus » Imap » Version: 2.5.9

cpe:2.3:a:cyrus:imap:2.5.9
Cyrus » Imap » Version: 3.0.0

cpe:2.3:a:cyrus:imap:3.0.0
Cyrus » Imap » Version: 3.0.1

cpe:2.3:a:cyrus:imap:3.0.1
Cyrus » Imap » Version: 3.0.2

cpe:2.3:a:cyrus:imap:3.0.2
Cyrus » Imap » Version: 3.0.3

cpe:2.3:a:cyrus:imap:3.0.3
Cyrus » Imap » Version: 3.0.4

cpe:2.3:a:cyrus:imap:3.0.4
Cyrus » Imap » Version: 3.0.5

cpe:2.3:a:cyrus:imap:3.0.5
Cyrus » Imap » Version: 3.0.6

cpe:2.3:a:cyrus:imap:3.0.6
Cyrus » Imap » Version: 3.0.7

cpe:2.3:a:cyrus:imap:3.0.7
Cyrus » Imap » Version: 3.0.8

cpe:2.3:a:cyrus:imap:3.0.8
Cyrus » Imap » Version: 3.0.9

cpe:2.3:a:cyrus:imap:3.0.9
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Eus » Version: 8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat » Enterprise Linux Eus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat » Enterprise Linux Eus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4
Redhat » Enterprise Linux Server Aus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat » Enterprise Linux Server Aus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
Redhat » Enterprise Linux Server Tus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
Redhat » Enterprise Linux Server Tus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11356

Products

Pricing

Contact Us