GitHub Advisoryadvisory · Maven

GHSA-92j7-34x9-f3jw Apache James Denial of Service

MEDIUM Published 2022-04-29 Modified 2023-09-18 Official page ↗
Aliases
CVE-2004-2650
Ecosystem
Maven
Packages
org.apache.james:james-server
Severity
Moderate
Weaknesses
CWE-400
Reviewed
2023-09-18

Affected packages

• Maven org.apache.james:james-server: < 2.2.0 → fixed in 2.2.0

Description

Spooler in Apache Foundation James before 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.

Related

Alias · CVE (1)

  • CVE-2004-2650 Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References