https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:25:57 +0000 https://vulnerability.circl.lu/vuln/cve-2026-42391 <p><strong>Affected:</strong> Open-Xchange GmbH OX Dovecot Pro, Open-Xchange GmbH OX Dovecot CE</p> <p>An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by the same process. This can cause degradation or denial of service for IMAP logins. Limit the number of connections handled by a single imap-login process. This has a performance impact though. Update to non-vulnerable version. No publicly available exploits are known.</p> <p><strong>Affected:</strong> Open-Xchange GmbH OX Dovecot Pro, Open-Xchange GmbH OX Dovecot CE</p> <p>An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by the same process. This can cause degradation or denial of service for IMAP logins. Limit the number of connections handled by a single imap-login process. This has a performance impact though. Update to non-vulnerable version. No publicly available exploits are known.</p> https://vulnerability.circl.lu/vuln/cve-2026-42391