UNKNOWNCVE-2026-27858
Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedl
Platform
linux
Component
ox-dovecot-pro-managesieve
Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.
How to fix
Actualice OX Dovecot Pro a una versión posterior a 3.1.0 o implemente medidas de protección de acceso al protocolo managesieve. Esto evitará que atacantes envíen mensajes maliciosos que consuman grandes cantidades de memoria y provoquen la caída del servicio. Consulte la documentación de Open-Xchange para obtener más detalles sobre las medidas de protección.
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free