CVE-2026-27859

A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes mail delivery process to consume large amounts of CPU time. Use MTA capabilities to limit RFC 2231 MIME parameters in mail messages, or upgrade to fixed version where the processing is limited. No publicly available exploits are known.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
cpe:2.3:a:open-xchange:dovecot:*:*:*:*:pro:*:*:*
cpe:2.3:a:open-xchange:dovecot:*:*:*:*:pro:*:*:*

History

30 Apr 2026, 17:39

Type Values Removed Values Added
CPE cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*
cpe:2.3:a:open-xchange:dovecot:*:*:*:*:pro:*:*:*
First Time Open-xchange
Open-xchange dovecot
Dovecot
Dovecot dovecot
References () https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0001.jsonĀ - () https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0001.jsonĀ - Vendor Advisory

27 Mar 2026, 09:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-03-27 09:16

Updated : 2026-04-30 17:39


NVD link : CVE-2026-27859

Mitre link : CVE-2026-27859

CVE.ORG link : CVE-2026-27859


JSON object : View

Products Affected

open-xchange

  • dovecot

dovecot

  • dovecot
CWE
CWE-400

Uncontrolled Resource Consumption