CVE-2021-40110

CVE-2021-40110 affects Apache James prior to 3.6.1. A DoS can be triggered by an IMAP user crafting LIST commands that exploit a vulnerable regular expression; upgrading to Apache James 3.6.1 or higher enforces the RE2J regex engine to execute in linear time and mitigates the issue. The available...

CVE-2021-40110 Apache James IMAP vulnerable to a ReDoS

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...