[Bug 1200059] New: CVE-2014-9472 rt: denial of service flaw in email gateway

bugzilla at redhat.com bugzilla at redhat.com
Mon Mar 9 15:33:42 UTC 2015


https://bugzilla.redhat.com/show_bug.cgi?id=1200059

            Bug ID: 1200059
           Summary: CVE-2014-9472 rt: denial of service flaw in email
                    gateway
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team at redhat.com
          Reporter: mprpic at redhat.com
                CC: perl-devel at lists.fedoraproject.org,
                    rc040203 at freenet.de, tibbs at math.uh.edu



A denial of service flaw was found in Request Tracker's (RT) email gateway. A
remote attacker could use this flaw to trigger a denial of service (resource
exhaustion) in an RT installation accepting email from untrusted sources.

This flaw is fixed in 4.2.10:

https://bestpractical.com/release-notes/rt/4.2.10

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=DNPiSXwfKd&a=cc_unsubscribe



More information about the perl-devel mailing list