Its possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.
Weakness
The product specifies a regular expression in a way that causes data to be improperly matched or compared.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Otrs | Otrs | 6.0.1 (including) | * |
| Otrs | Otrs | 7.0.0 (including) | 7.0.29 (excluding) |
| Otrs | Otrs | 8.0.0 (including) | 8.0.16 (excluding) |
| Otrs2 | Ubuntu | bionic | * |
| Otrs2 | Ubuntu | focal | * |
| Otrs2 | Ubuntu | hirsute | * |
| Otrs2 | Ubuntu | impish | * |
| Otrs2 | Ubuntu | trusty | * |
| Otrs2 | Ubuntu | xenial | * |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/15.html
- https://cwe.mitre.org/data/definitions/6.html
- https://cwe.mitre.org/data/definitions/79.html