Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27924.json"
}{
"source": "CPE_STRING",
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.8.15-NA"
},
{
"last_affected": "8.8.15-NA"
},
{
"introduced": "8.8.15-p1"
},
{
"last_affected": "8.8.15-p1"
},
{
"introduced": "8.8.15-p11"
},
{
"last_affected": "8.8.15-p11"
},
{
"introduced": "8.8.15-p20"
},
{
"last_affected": "8.8.15-p20"
},
{
"introduced": "8.8.15-p26"
},
{
"last_affected": "8.8.15-p26"
},
{
"introduced": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p3"
},
{
"introduced": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p30"
},
{
"introduced": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p31"
},
{
"introduced": "8.8.15-p5"
},
{
"last_affected": "8.8.15-p5"
},
{
"introduced": "9.0.0-NA"
},
{
"last_affected": "9.0.0-NA"
},
{
"introduced": "9.0.0-p1"
},
{
"last_affected": "9.0.0-p1"
},
{
"introduced": "9.0.0-p19"
},
{
"last_affected": "9.0.0-p19"
},
{
"introduced": "9.0.0-p20"
},
{
"last_affected": "9.0.0-p20"
},
{
"introduced": "9.0.0-p23"
},
{
"last_affected": "9.0.0-p23"
},
{
"introduced": "9.0.0-p4"
},
{
"last_affected": "9.0.0-p4"
},
{
"introduced": "9.0.0-p7"
},
{
"last_affected": "9.0.0-p7"
}
]
}{
"source": "CPE_STRING",
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p10:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p12:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p13:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p14:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p15:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p16:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p17:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p18:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p25:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p27:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p29:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p7:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p8:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p9:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.8.15-NA"
},
{
"last_affected": "8.8.15-NA"
},
{
"introduced": "8.8.15-p1"
},
{
"last_affected": "8.8.15-p1"
},
{
"introduced": "8.8.15-p10"
},
{
"last_affected": "8.8.15-p10"
},
{
"introduced": "8.8.15-p11"
},
{
"last_affected": "8.8.15-p11"
},
{
"introduced": "8.8.15-p12"
},
{
"last_affected": "8.8.15-p12"
},
{
"introduced": "8.8.15-p13"
},
{
"last_affected": "8.8.15-p13"
},
{
"introduced": "8.8.15-p14"
},
{
"last_affected": "8.8.15-p14"
},
{
"introduced": "8.8.15-p15"
},
{
"last_affected": "8.8.15-p15"
},
{
"introduced": "8.8.15-p16"
},
{
"last_affected": "8.8.15-p16"
},
{
"introduced": "8.8.15-p17"
},
{
"last_affected": "8.8.15-p17"
},
{
"introduced": "8.8.15-p18"
},
{
"last_affected": "8.8.15-p18"
},
{
"introduced": "8.8.15-p2"
},
{
"last_affected": "8.8.15-p2"
},
{
"introduced": "8.8.15-p20"
},
{
"last_affected": "8.8.15-p20"
},
{
"introduced": "8.8.15-p23"
},
{
"last_affected": "8.8.15-p23"
},
{
"introduced": "8.8.15-p24"
},
{
"last_affected": "8.8.15-p24"
},
{
"introduced": "8.8.15-p25"
},
{
"last_affected": "8.8.15-p25"
},
{
"introduced": "8.8.15-p26"
},
{
"last_affected": "8.8.15-p26"
},
{
"introduced": "8.8.15-p27"
},
{
"last_affected": "8.8.15-p27"
},
{
"introduced": "8.8.15-p29"
},
{
"last_affected": "8.8.15-p29"
},
{
"introduced": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p3"
},
{
"introduced": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p30"
},
{
"introduced": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p31"
},
{
"introduced": "8.8.15-p4"
},
{
"last_affected": "8.8.15-p4"
},
{
"introduced": "8.8.15-p5"
},
{
"last_affected": "8.8.15-p5"
},
{
"introduced": "8.8.15-p6"
},
{
"last_affected": "8.8.15-p6"
},
{
"introduced": "8.8.15-p7"
},
{
"last_affected": "8.8.15-p7"
},
{
"introduced": "8.8.15-p8"
},
{
"last_affected": "8.8.15-p8"
},
{
"introduced": "8.8.15-p9"
},
{
"last_affected": "8.8.15-p9"
},
{
"introduced": "9.0.0-NA"
},
{
"last_affected": "9.0.0-NA"
},
{
"introduced": "9.0.0-p1"
},
{
"last_affected": "9.0.0-p1"
},
{
"introduced": "9.0.0-p10"
},
{
"last_affected": "9.0.0-p10"
},
{
"introduced": "9.0.0-p11"
},
{
"last_affected": "9.0.0-p11"
},
{
"introduced": "9.0.0-p13"
},
{
"last_affected": "9.0.0-p13"
},
{
"introduced": "9.0.0-p14"
},
{
"last_affected": "9.0.0-p14"
},
{
"introduced": "9.0.0-p16"
},
{
"last_affected": "9.0.0-p16"
},
{
"introduced": "9.0.0-p17"
},
{
"last_affected": "9.0.0-p17"
},
{
"introduced": "9.0.0-p18"
},
{
"last_affected": "9.0.0-p18"
},
{
"introduced": "9.0.0-p19"
},
{
"last_affected": "9.0.0-p19"
},
{
"introduced": "9.0.0-p2"
},
{
"last_affected": "9.0.0-p2"
},
{
"introduced": "9.0.0-p20"
},
{
"last_affected": "9.0.0-p20"
},
{
"introduced": "9.0.0-p22"
},
{
"last_affected": "9.0.0-p22"
},
{
"introduced": "9.0.0-p23"
},
{
"last_affected": "9.0.0-p23"
},
{
"introduced": "9.0.0-p3"
},
{
"last_affected": "9.0.0-p3"
},
{
"introduced": "9.0.0-p4"
},
{
"last_affected": "9.0.0-p4"
},
{
"introduced": "9.0.0-p5"
},
{
"last_affected": "9.0.0-p5"
},
{
"introduced": "9.0.0-p6"
},
{
"last_affected": "9.0.0-p6"
},
{
"introduced": "9.0.0-p7"
},
{
"last_affected": "9.0.0-p7"
},
{
"introduced": "9.0.0-p8"
},
{
"last_affected": "9.0.0-p8"
},
{
"introduced": "9.0.0-p9"
},
{
"last_affected": "9.0.0-p9"
}
]
}{
"source": "CPE_STRING",
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.8.15-NA"
},
{
"last_affected": "8.8.15-NA"
},
{
"introduced": "8.8.15-p6"
},
{
"last_affected": "8.8.15-p6"
},
{
"introduced": "9.0.0-NA"
},
{
"last_affected": "9.0.0-NA"
}
]
}{
"source": "CPE_STRING",
"cpe": [
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p21:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*",
"cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.8.15-NA"
},
{
"last_affected": "8.8.15-NA"
},
{
"introduced": "8.8.15-p20"
},
{
"last_affected": "8.8.15-p20"
},
{
"introduced": "8.8.15-p21"
},
{
"last_affected": "8.8.15-p21"
},
{
"introduced": "8.8.15-p23"
},
{
"last_affected": "8.8.15-p23"
},
{
"introduced": "8.8.15-p24"
},
{
"last_affected": "8.8.15-p24"
},
{
"introduced": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p3"
},
{
"introduced": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p30"
},
{
"introduced": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p31"
},
{
"introduced": "8.8.15-p5"
},
{
"last_affected": "8.8.15-p5"
},
{
"introduced": "9.0.0-NA"
},
{
"last_affected": "9.0.0-NA"
},
{
"introduced": "9.0.0-p13"
},
{
"last_affected": "9.0.0-p13"
},
{
"introduced": "9.0.0-p14"
},
{
"last_affected": "9.0.0-p14"
},
{
"introduced": "9.0.0-p16"
},
{
"last_affected": "9.0.0-p16"
},
{
"introduced": "9.0.0-p17"
},
{
"last_affected": "9.0.0-p17"
},
{
"introduced": "9.0.0-p23"
},
{
"last_affected": "9.0.0-p23"
},
{
"introduced": "9.0.0-p3"
},
{
"last_affected": "9.0.0-p3"
},
{
"introduced": "9.0.0-p4"
},
{
"last_affected": "9.0.0-p4"
}
]
}