Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-21439

Fixed in a distro release EPSS <1%CVSS 6.5

DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.

Published 2021-06-14 · CVE record · OSV

Products: OTRS AG ((OTRS)) Community Edition, OTRS AG OTRS

Distro releases

ReleasePackageFixed in
Debian 10otrs26.0.16-2+deb10u1
Debian 11otrs26.0.32-5
Ubuntu 16.04 LTSotrs2no fix
Ubuntu 18.04 LTSotrs2no fix
Ubuntu 20.04 LTSotrs2no fix
Ubuntu 22.04 LTSotrs2no fix