Lucene search
K

4 matches found

OSV
OSV
added 2022/01/08 12:40 a.m.21 views

GHSA-R58X-WJG8-63M9 Denial of Service in Apache James

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

7.5CVSS7.6AI score0.00673EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/01/08 12:40 a.m.36 views

Denial of Service in Apache James

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

7.5CVSS2.6AI score0.00673EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2022/01/04 9:15 a.m.20 views

Design/Logic Flaw

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

5CVSS7.6AI score0.00673EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/04 8:55 a.m.18 views

CVE-2021-40110 Apache James IMAP vulnerable to a ReDoS

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

7.8AI score0.00673EPSS
Exploits0References2
Rows per page
Query Builder