A mail message that contains an excessive number of RFC 2231 MIME parameters causes the LMTP component of the mail server to consume an abnormal amount of CPU time. The result is a denial of service scenario in which the delivery process is exhausted and can no longer serve legitimate mail traffic. The underlying weakness is an uncontrolled resource consumption scenario, identified with CWE‑400 and CWE‑770.

The vulnerability affects the OX Dovecot Pro mail server from Open‑Xchange GmbH. No specific version numbers of the vulnerable build are listed in the advisory. Users of any among these deployments are potentially impacted until a patch or configuration fix is applied.

The CVSS score of 5.3 indicates a moderate severity, and the EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The vulnerability is not catalogued in CISA's KEV list, and no public exploits have been published. Because the vulnerability requires sending a specially crafted message, an attacker would need to successfully inject mail into the system or have some way to trigger the LMTP processing path. The impact is limited to resource exhaustion rather than confidentiality or integrity compromise.