Apache James IMAP Literals Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Apache James versions prior to 3.7.6 and 3.8.0 through 3.8.1. This vulnerability allows both authenticated and unauthenticated users to abuse IMAP literals, leading to unbounded memory allocation and prolonged computations. Versions 3.7.6 and 3.8.2 have addressed this issue by restricting improper use of IMAP literals.

Impact

Exploitation of this vulnerability can cause excessive memory usage and extended processing times, potentially leading to service degradation or unavailability.