https://bugzilla.redhat.com/show_bug.cgi?id=2526665
Bug ID: 2526665
Summary: CVE-2026-27852 perl-Email-Address-XS: Dovecot: Denial
of service via crafted email headers [epel-all]
Product: Fedora EPEL
Version: epel10
Status: NEW
Whiteboard: {"flaws": ["f79d6a33-1d20-43ab-bc8a-911e6c534478"]}
Component: perl-Email-Address-XS
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected],
[email protected]
Blocks: 2525557 (CVE-2026-27852)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
An attacker that can send mail to a user can craft a message whose headers
contain a very large number of email addresses or MIME parameters, which causes
excessive memory usage when the message is later parsed. The message is still
delivered, but reading it over IMAP can exhaust the memory limit of the process
and terminate it, causing denial of service for the affected user. Update to
non-vulnerable version. No publicly available exploits are known.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2525557
[Bug 2525557] CVE-2026-27852 dovecot: Dovecot: Denial of service via crafted
email headers
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2526665
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202526665%23c0
--
_______________________________________________
perl-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
