p PatchFirst

CVE-2022-39052

CVE-2022-39052 · DoS attack using email

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system

CVSS 7.5 · High · EPSS 0.7%

Published
Updated

Stack: system

Affected products and versions

  • otrs

    Versions
    • ≥ 7.0.x, ≤ 7.0.39: Affected (custom)
    • ≥ 8.0.x, ≤ 8.0.26: Affected (custom)

    No fix published

  • ((otrs)) community edition

    Versions
    • ≥ 6.0.1, < 6.0.x*: Affected (custom)

    No fix published

  • znuny Ubuntu:24.04:LTS

    Versions
    • 6.5.3-1
    • 6.5.4-1
    • 6.5.5-1
    • 6.5.6-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:25.10

    Versions
    • 6.5.14-1
    • 6.5.15-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.10

    Versions
    • 6.5.18-1
    • 6.5.20-1
    • 6.5.21-1
    • 6.5.22-1
    • 6.5.23-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.04:LTS

    Versions
    • 6.5.15-2
    • 6.5.18-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →