Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-36093 EUVD-2021-22725GHSA-p8h5-xqwr-ww86

DoS attack using PostMaster filters

Published Sep 6, 2021 · Updated Sep 16, 2024 · Assigned by OTRS

Description

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.

Affected products

VendorProductAffectedFixed
OTRS ((OTRS)) Community Edition 6.0.1 – < 6.0.x* 6.0.x*
OTRS OTRS 7.0.x – ≤ 7.0.28, 8.0.x – ≤ 8.0.15 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS otrs2 No fix yet —
Ubuntu 20.04 LTS otrs2 No fix yet —
Ubuntu 18.04 LTS otrs2 No fix yet —
Ubuntu 16.04 LTS otrs2 No fix yet —

References