CVE-2024-37358
Apache James: denial of service through the use of IMAP literals
Résumé
Apache James: denial of service through the use of IMAP literals
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations
Version 3.7.6 and 3.8.2 restrict such illegitimate use of IMAP literals.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web james.apache.org