Apache James Server JMAP Unbounded Memory Consumption Leading to Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Apache James Server JMAP HTML to plain text conversion implementation, affecting versions 3.8.0 prior to 3.8.2 and 3.7.0 prior to 3.7.6. This vulnerability is caused by unbounded memory consumption, which can lead to service disruption.

Impact

Exploitation of this vulnerability causes unbounded memory consumption, leading to a denial-of-service condition where the server becomes unresponsive or unavailable.

Remediation

Users are advised to upgrade to Apache James Server versions 3.7.6 or 3.8.2, both of which address this vulnerability.