In Dovecot before 2.3.11.3 uncontrolled recursion in submission lmtp and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.