Threats tagged 'ghsa-68qj-r5q8-pvm5'

A resource exhaustion vulnerability exists in the JSON reader of Progressive Robot hMailServer versions 6.3.2 through 6.3.7. A remote attacker can send specially crafted JSON documents that cause excessive memory allocation and thread blocking, leading to denial of service affecting mail delivery, the REST API, and webmail functionality. The vulnerability allows unauthenticated access via TLS-RPT reports and certain REST API endpoints when enabled. This flaw is distinct from another JSON reader issue fixed in version 6.3.6.