Threats Tagged 'cve-2026-27852'

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

CVE-2026-27852 is a vulnerability in Open-Xchange GmbH's OX Dovecot Pro where an attacker can cause excessive memory usage by sending an email with headers containing a very large number of email addresses or MIME parameters. This leads to memory exhaustion and termination of the process when the message is read over IMAP, resulting in denial of service for the affected user. No public exploits are known. The vulnerability affects specific versions of the product.