{"action":"Upgrade cyrus-imapd to 3.4.2-1 or later.","affected":[{"fixed":"3.4.2-1","introduced":"0"}],"component":"cyrus-imapd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["3.4.2-1"],"id":"tcs_01M5NFQSF34W2T754TV8TKWSFB","modified_at":"2026-10-23T18:04:50.395677117Z","published_at":"2021-09-01T06:15:06.387Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-33582","https://security-tracker.debian.org/tracker/CVE-2021-33582"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-33582","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-33582"}],"summary":"Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions"}