CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2019-03-21

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Request Tracker (Bestpractical)
• Ubuntu Linux (Canonical)
• Debian Linux (Debian)
• Fedora (Fedoraproject)

References

• https://bestpractical.com/download-page
• https://lists.debian.org/debian-lts-announce/2020/02/msg00009.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPJVDT77ZPRU5Z2BEMZM7E…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YR46PPHBEM76DNN4DEQMAY…
• https://usn.ubuntu.com/4517-1/