Lucene search

K
githubGitHub Advisory DatabaseGHSA-92J7-34X9-F3JW
HistoryApr 29, 2022 - 3:01 a.m.

Apache James Denial of Service

2022-04-2903:01:51
CWE-400
GitHub Advisory Database
github.com
3

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%

Spooler in Apache Foundation James before 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.

CPENameOperatorVersion
org.apache.james:james-serverlt2.2.0

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%

Related for GHSA-92J7-34X9-F3JW