Apache James Mime4J before 0.8.15 allows denial of service upon MIME parsing
Upgrade to Mime4J 0.8.15 fixes the denial of service issue in Apache James
70
CVE-2026-85108
Denial of Service in Apache James Mime4J before 0.8.15
- CVSS 3.1
- 7.5 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Allocation of Resources Without Limits or Throttling in Apache James Mime4J library versions prior to 0.8.15 allows denial of service upon parsing Mime messages. Attackers trigger it by sending crafted messages to affected applications. This causes denial of service. Users of the library are affected.
What to do: Upgrade Apache James Mime4J library to version 0.8.15.
| Product | Affected | Fixed in |
|---|---|---|
| Apache James Mime4J | prior version 0.8.15 | 0.8.15 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to version 0.8.15 which fixes the issue by enforcing new limits and providing better defaults.
- Weakness
- CWE-770
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H