Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS05Mmo3LTM0eDktZjNqd81QjA

Apache James Denial of Service

Spooler in Apache Foundation James before 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.

Permalink: https://github.com/advisories/GHSA-92j7-34x9-f3jw
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Mmo3LTM0eDktZjNqd81QjA
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 years ago
Updated: 8 months ago

Identifiers: GHSA-92j7-34x9-f3jw, CVE-2004-2650
References:

• https://nvd.nist.gov/vuln/detail/CVE-2004-2650
• http://issues.apache.org/jira/browse/JAMES-268
• http://james.apache.org/changelog.html
• http://www.securityfocus.com/bid/15765
• https://github.com/advisories/GHSA-92j7-34x9-f3jw

Blast Radius: 0.0

Affected Packages