CVE Vulnerabilities

CVE-2022-39052

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Oct 17, 2022 | Modified: Oct 20, 2022
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Otrs Otrs 6.0.0 (including) 6.0.32 (including)
Otrs Otrs 7.0.0 (including) 7.0.39 (excluding)
Otrs Otrs 8.0.0 (including) 8.0.26 (excluding)
Znuny Ubuntu kinetic *
Znuny Ubuntu lunar *
Znuny Ubuntu mantic *
Znuny Ubuntu trusty *
Znuny Ubuntu xenial *

References