PT-2022-11188
CVE-2021-40111
·
تاريخ النشر
2022-01-04
·
تاريخ التحديث
2022-01-12
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Apache James versions prior to 3.6.1
Description
The issue allows for a Denial Of Service attack through crafted APPEND and STATUS IMAP commands, which can trigger infinite loops and result in expensive CPU computations and OutOfMemory exceptions. The IMAP user must be authenticated to exploit this issue.
Recommendations
For versions prior to 3.6.1, upgrade to Apache James 3.6.1 or higher to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾