tocsin

Debian/roundcube: unknown

RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image.

Action: Upgrade roundcube to 0.1.1-10 or later.

Affected

introducedfixedlast affected
00.1.1-10-

Fixed versions

0.1.1-10

Sources

published · modified · JSON