Beveiligingsadvies

CVE-2024-37358

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-06 11:22:38

Laatst bijgewerkt 2025-09-01 09:40:18

Toegewezen door apache

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations Version 3.7.6 and 3.8.2 restrict such illegitimate use of IMAP literals.

← Alle CVE's bekijken Bekijk op cve.org ↗