CVE-2026-27858 in Open-Xchange OX Dovecot Pro

摘要 (英语)

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.

预定

2026-02-24

披露

2026-03-27

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
353847	Open-Xchange OX Dovecot Pro Message 拒绝服务	400	未定义	官方修复	CVE-2026-27858