CVE-2024-37358
Apache James: denial of service through the use of IMAP literals
概要
Apache James: denial of service through the use of IMAP literals
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations
Version 3.7.6 and 3.8.2 restrict such illegitimate use of IMAP literals.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web james.apache.org