CVE-2026-85108

Full vulnerability record from the local CVENow database.

Description

Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to version 0.8.15 which fixes the issue by enforcing new limits and providing better defaults.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-06 12:17:23.260000

Last modified

2026-11-06 19:17:57.803000

View original CVE JSON

{
  "id": "CVE-2026-85108",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-06T12:17:23.260",
  "lastModified": "2026-11-06T19:17:57.803",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages.\nUsers are recommended to upgrade to version 0.8.15 which fixes the issue by enforcing new limits and providing better defaults."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache James Mime4J Core",
          "defaultStatus": "unaffected",
          "collectionURL": "https://repo.maven.apache.org/maven2",
          "packageName": "org.apache.james:apache-mime4j-core",
          "packageURL": "pkg:maven/org.apache.james/apache-mime4j-core",
          "versions": [
            {
              "version": "0",
              "lessThan": "0.8.15",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache James Mime4J Dom",
          "defaultStatus": "unaffected",
          "packageName": "org.apache.james:apache-mime4j-dom",
          "packageURL": "pkg:maven/org.apache.james/apache-mime4j-dom",
          "versions": [
            {
              "version": "0",
              "lessThan": "0.8.15",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread.html/twktm00gmc8lt7tlqrrj16xw7kzbx16s",
      "source": "[email protected]"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/11/06/18",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}