CVE-2008-5620 — Webmail vulnerability

CWE-3998 documents7 sources
Severity
7.8HIGHNVD
EPSS
0.6%
top 31.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Roundcube Webmail
Timeline
PublishedDec 17
Latest updateMay 17

Description

RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

Patches

Patch: sourceforge.net ↗Patch: sourceforge.net ↗

🔴Vulnerability Details

3
GHSA
GHSA-cm73-jgcq-4842: RoundCube Webmail (roundcubemail) before 0↗2022-05-17
▶
CVEList
CVE-2008-5620: RoundCube Webmail (roundcubemail) before 0↗2008-12-17
▶
OSV
CVE-2008-5620: RoundCube Webmail (roundcubemail) before 0↗2008-12-17
▶

📋Vendor Advisories

2
Red Hat
roundcubemail: DoS due insufficient quota image size paramaters checking (use excessive amount of memory)↗2008-12-16
▶
Debian
CVE-2008-5620: roundcube - RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cau...↗2008
▶

💬Community

2
Bugzilla
Fix for CVE-2010-0464 in Roundcube 0.1.1 in EPEL5↗2012-11-14
▶
Bugzilla
CVE-2008-5620 roundcubemail: DoS due insufficient quota image size paramaters checking (use excessive amount of memory)↗2008-12-17
▶
CVE-2008-5620 — Roundcube Webmail vulnerability | cvebase