Apache James vulnerable to denial of service through the use of IMAP literals
Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations Version 3.7.6 and 3.8.2 restrict such illegitimate use of IMAP literals.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-37358US | high7.5 | — | ||
Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be us… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/apache/james-projectPACKAGE
- https://github.com/apache/james-project/commit/6dd3ad9ea1f6a9bc887d2c7af3f5aa30a60ec769WEB
- https://github.com/apache/james-project/commit/b2f3c06edfd37b409121bf04c56a6f026048a77eWEB
- https://lists.apache.org/thread/1pxsh11v5s3fkvhnqvkmlqwt3fgpcrqcWEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-37358ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan