CVE-2021-21439
published 2021-06-14CVE-2021-21439: DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or…
PriorityP429medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.98%
57.7th percentile
DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | otrs2 | < otrs2 6.0.32-5 (bullseye) | otrs2 6.0.32-5 (bullseye) |
| debian | znuny | < otrs2 6.0.32-5 (bullseye) | otrs2 6.0.32-5 (bullseye) |
| otrs | otrs | 6.0.1 – 6.0.30 | — |
| otrs | otrs | >= 7.0.0 < 7.0.27 | 7.0.27 |
| otrs | otrs | >= 8.0.0 < 8.0.14 | 8.0.14 |
| otrs_ag | community_edition | >= 6.0.1 < 6.0.x* | 6.0.x* |
| otrs_ag | otrs | 7.0.x – 7.0.26 | — |
| otrs_ag | otrs | 8.0.x – 8.0.13 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2021-21439: otrs2 - DoS attack can be performed when an email contains specially designed URL in the...
vendor_debian·2021·CVSS 6.5
CVE-2021-21439 [MEDIUM] CVE-2021-21439: otrs2 - DoS attack can be performed when an email contains specially designed URL in the...
DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.
Scope: local
bullseye: resolved (fixed in 6.0.32-5)
GHSA
GHSA-58p7-gj75-3437: DoS attack can be performed when an email contains specially designed URL in the body
ghsa_unreviewed·2022-05-24
CVE-2021-21439 [MEDIUM] CWE-754 GHSA-58p7-gj75-3437: DoS attack can be performed when an email contains specially designed URL in the body
DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.
OSV
CVE-2021-21439: DoS attack can be performed when an email contains specially designed URL in the body
osv·2021-06-14·CVSS 6.5
CVE-2021-21439 [MEDIUM] CVE-2021-21439: DoS attack can be performed when an email contains specially designed URL in the body
DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-06-14
Published