PT-2026-83057
CVE-2026-40014
·
تاريخ النشر
2026-08-28
·
تاريخ التحديث
2026-09-14
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
dovecot versions prior to 2.4.5-1.1
Description
An attacker can craft a message header that causes the IMAP THREAD command to consume CPU resources disproportionate to the message size. When a mail client executes the THREAD command on the affected mailbox, it can lead to performance degradation or a denial of service for the IMAP service.
Recommendations
Update to version 2.4.5-1.1.
Monitor the system for abnormal CPU usage, terminate the offending process, and remove the malicious message from the affected mailbox.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾