DEBIAN-CVE-2026-47088

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2026-47088
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-47088.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-47088
Upstream
  • CVE-2026-47088
Published
2026-07-16T19:16:49Z
Modified
2026-09-14T17:03:15Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could craft an email message containing an RFC 822 comment ending with a backslash. When parsing the message, the server would read past the message's end in memory, and read into the heap, returning the read content to the user.

References

Affected packages

Debian:12 / cyrus-imapd

Package

Name
cyrus-imapd
Purl
pkg:deb/debian/cyrus-imapd?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.6.1-4+deb12u5

Affected versions

3.*
3.6.1-4
3.6.1-4+deb12u1
3.6.1-4+deb12u2
3.6.1-4+deb12u3
3.6.1-4+deb12u4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-47088.json"

Debian:13 / cyrus-imapd

Package

Name
cyrus-imapd
Purl
pkg:deb/debian/cyrus-imapd?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.2-1+deb13u2

Affected versions

3.*
3.10.2-1
3.10.2-1+deb13u1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-47088.json"

Debian:14 / cyrus-imapd

Package

Name
cyrus-imapd
Purl
pkg:deb/debian/cyrus-imapd?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.12.3-1

Affected versions

3.*
3.10.2-1
3.12.0-1
3.12.0-2
3.12.1-1
3.12.1-2
3.12.1-3
3.12.2-1
3.12.3-1~bpo13+1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-47088.json"