PT-2015-4230 · Best Practical · Request Tracker

Publicado 2015-02-26 · Atualizado 2017-09-03 · CVE-2014-9472

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Request Tracker versions 3.0.0 through 4.0.22 Request Tracker versions 4.2.x before 4.2.10

Description The issue allows remote attackers to cause a denial of service, consuming CPU and disk resources, via a crafted email.

Recommendations For versions 3.0.0 through 4.0.22, update to version 4.0.23 or later. For versions 4.2.x before 4.2.10, update to version 4.2.10 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-9472

DLA-158-1

DSA-3176-1

MGASA-2017-0325

Produtos afetados

Request Tracker

Referências · 24

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1165 · Nota de Segurança
• http://debian.org/security/2015/dsa-3176 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/DSA-3176-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3176-1 · Aviso do Fabricante
• http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=16665 · Nota
• http://lists.bestpractical.com/pipermail/rt-announce/2017-June/000297.html · Nota
• https://packages.debian.org/src:request-tracker4 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1464 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-9472 · Nota de Segurança
• https://security-tracker.debian.org/tracker/source-package/request-tracker4 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9472 · Nota de Segurança
• http://lists.bestpractical.com/pipermail/rt-announce/2015-August/000279.html · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html · Aviso do Fabricante