Threats tagged 'ghsa-r369-45gr-q63m'

Axigen Mail Server versions before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 have an unauthenticated denial of service vulnerability. This flaw is due to unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. An attacker can send a single deeply nested request to various web service listeners, causing stack exhaustion and repeated crashes of SMTP, IMAP, POP3, and web services.