An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system
CWE-835, CWE-835