← Back

CVE-2026-27859

nvd nist
Published: Mar 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: security@open-xchange.com (Secondary)

Description

A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes mail delivery process to consume large amounts of CPU time. Use MTA capabilities to limit RFC 2231 MIME parameters in mail messages, or upgrade to fixed version where the processing is limited. No publicly available exploits are known.

Affected (3)

Dovecot
1 product
Dovecot
Open Xchange
1 product
Dovecot
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Dovecot
Before 2.4.3
Open Xchange
Dovecot
Before 3.0.5
Dovecot
From 3.1.0 to 3.1.4

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (1)

Source: security@open-xchange.com
Vendor Advisory

Timeline

No history available yet.