Debian/roundcube: high 8.8
Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.
Action: Upgrade roundcube to 1.1.1+dfsg.1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.1+dfsg.1-2 | - |
Fixed versions
| 1.1.1+dfsg.1-2 |
Sources
- osv: DEBIAN-CVE-2015-2181#Debian:14/roundcube
- https://security-tracker.debian.org/tracker/CVE-2015-2181
published · modified · JSON