Isync_project Isync
4 CVEs affecting Isync_project Isync. Latest disclosed: 2022-02-18. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3657 | Critical | 9.8 | 2022-02-18 | A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers… |
CVE-2021-44143 | Critical | 9.8 | 2021-11-22 | A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message… |
CVE-2021-3578 | High | 7.8 | 2022-02-16 | A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer val… |
CVE-2013-0289 | | 2014-05-23 | Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 c… |