CVE-2021-36093: DoS attack using PostMaster filters

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2021-36093.

Q: What is the severity of CVE-2021-36093?

The severity of CVE-2021-36093 is medium.

Q: Which software versions are affected by CVE-2021-36093?

CVE-2021-36093 affects OTRS AG (OTRS) Community Edition 6.0.1 and later versions, OTRS AG OTRS 7.0.0 to 7.0.28, and OTRS AG OTRS 8.0.0 to 8.0.15.

Q: How can CVE-2021-36093 be exploited?

CVE-2021-36093 can be exploited by creating an email that gets stuck while being processed by PostMaster filters, causing a Denial of Service (DoS) condition.

Q: Is there a fix available for CVE-2021-36093?

Yes, a fix is available. Please refer to the official OTRS security advisory for more details.

Published Sep 6, 2021

Updated

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.

Affected Software

3 affected components

OTRS OTRS>=6.0.1

OTRS OTRS>=7.0.0<7.0.29

OTRS OTRS>=8.0.0<8.0.16

Remediation

Information

Update to OTRS 8.0.16, OTRS 7.0.29.

Event History

Sep 6, 2021

CVE Published

via MITRE·01:15 PM

Data Sourced

via MITRE·01:15 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-36093.

What is the severity of CVE-2021-36093?