Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-aqre-33na-w3d9
Vulnerability ID VCID-aqre-33na-w3d9
Aliases CVE-2021-40111
GHSA-fqgw-6qj5-8hmp
Summary Loop with Unreachable Exit Condition ('Infinite Loop') In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions.This vulnerability had been patched in Apache James and higher. We recommend the upgrade.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2021-40111
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-fqgw-6qj5-8hmp
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2021-40111
generic_textual MODERATE https://www.openwall.com/lists/oss-security/2022/01/04/3
generic_textual MODERATE http://www.openwall.com/lists/oss-security/2022/01/04/3
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-40111
https://www.openwall.com/lists/oss-security/2022/01/04/3
http://www.openwall.com/lists/oss-security/2022/01/04/3
CVE-2021-40111 https://nvd.nist.gov/vuln/detail/CVE-2021-40111
GHSA-fqgw-6qj5-8hmp https://github.com/advisories/GHSA-fqgw-6qj5-8hmp
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.72667
EPSS Score 0.00733
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:49:13.377554+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jamesframework/james/CVE-2021-40111.yml 38.0.0