CyberRota Analysis
AI-GeneratedAn unauthenticated attacker can exploit a vulnerability in IMAP servers by sending an excessively large number of parameters in the IMAP ID command, leading to significant memory and CPU resource consumption. This can result in degraded performance or denial of service for IMAP logins, affecting all connections managed by the compromised process. Organizations utilizing IMAP services should prioritize addressing this vulnerability to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by the same process. This can cause degradation or denial of service for IMAP logins. Limit the number of connections handled by a single imap-login process. This has a performance impact though. Update to non-vulnerable version. No publicly available exploits are known.