CVE-2015-2181: Buffer Overflow
Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2181?
CVE-2015-2181 is considered a critical vulnerability due to the potential for remote code execution through buffer overflows.
How do I fix CVE-2015-2181?
To fix CVE-2015-2181, upgrade your Roundcube installation to version 1.1.0 or later, which includes the necessary security patches.
What types of attacks are possible with CVE-2015-2181?
CVE-2015-2181 allows remote attackers to exploit buffer overflows, potentially leading to unauthorized access or control of the affected system.
What versions of Roundcube are affected by CVE-2015-2181?
CVE-2015-2181 affects all Roundcube versions prior to 1.1.0.
Is CVE-2015-2181 a zero-day vulnerability?
CVE-2015-2181 was not initially disclosed as a zero-day vulnerability since it has available patches, but it poses a significant risk until systems are updated.