Vulnerabilityhigh
Apache James before 3.9.1 allows denial of service upon MIME parsing
Original title: CVE-2026-85111: Apache James: Denial of service upon MIME parsing
AI summary · x-ai/grok-4.7Summaries by Vani AI
Upgrade to Apache James 3.9.1 or Mime4J 0.8.15 fixes the MIME parsing denial of service issue
Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. The vulnerability affects Apache James before 3.9.1. Users are recommended to upgrade to Apache James server 3.9.1.
Key facts
- Apache James before 3.9.1 is affected
- Fixed in Apache James 3.9.1
- Fixed in Mime4J 0.8.15
Security assessment · AI, from the articleNo known exploitation
Impact: Denial of service upon parsing Mime messages
| Product | Affected | Fixed in |
|---|---|---|
| Apache James | before 3.9.1 | 3.9.1 |
What to do
- 1.Upgrade to Apache James 3.9.1
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85111 | Resource Exhaustion DoS in Apache James Mime4J library before 0.8.15 | 8.7 | — |
From the original article
Posted by Benoit Tellier on Nov 06 Severity: CVSS 4. 0: 8. 7 (high) CVSS:4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.