CVE-2026-27859

State: Published
Severity: 5.3 Medium
Published: Mar 27, 2026
Updated: Mar 27, 2026
Reserved: Feb 24, 2026

Description

A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes mail delivery process to consume large amounts of CPU time. Use MTA capabilities to limit RFC 2231 MIME parameters in mail messages, or upgrade to fixed version where the processing is limited. No publicly available exploits are known.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	OX

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
OX Dovecot ProOpen-Xchange GmbH	3.0.2 and earlierAffected 3.1.0 and earlierAffected 2.4.0 and earlierAffected

References

https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0001.jsonvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.