Description
DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| OTRS AG | ((OTRS)) Community Edition | affected |
|
|||||||||
| OTRS AG | OTRS | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
Vendor Solution
Update to OTRS 8.0.14 or OTRS 7.0.27.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-3551-1 | otrs2 security update |
 EUVD |
EUVD-2021-8713 | DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: OTRS
Published:
Updated: 2024-09-16T19:52:22.948Z
Reserved: 2020-12-29T00:00:00.000Z
Link: CVE-2021-21439
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-06-14T08:15:10.097
Modified: 2024-11-21T05:48:21.857
Link: CVE-2021-21439
Redhat
No data.
OpenCVE Enrichment
No data.