CVE catalog

CVE-2018-7567

UBUNTU-CVE-2018-7567

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
5.20% · Oct 25, 2026

In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server during package installation. NOTE: the vendor disputes this issue stating "the behaviour is as designed and needed for different packages to be installed", "there is a security warning if the package is not verified by OTRS Group", and "there is the possibility and responsibility of an admin to check packages before installation which is possible as they are not binary.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianotrs2112.0.4p01-10vulnerable
Debianotrs2112.0.4p01-11vulnerable
Debianotrs2112.0.4p01-12vulnerable
Debianotrs2112.0.4p01-13vulnerable
Debianotrs2112.0.4p01-14vulnerable
Debianotrs2112.0.4p01-14.1vulnerable
Debianotrs2112.0.4p01-15vulnerable
Debianotrs2112.0.4p01-16vulnerable
Debianotrs2112.0.4p01-17vulnerable
Debianotrs2112.0.4p01-18vulnerable
Debianotrs2112.0.4p01-6vulnerable
Debianotrs2112.0.4p01-7vulnerable
Debianotrs2112.0.4p01-8vulnerable
Debianotrs2112.0.4p01-9vulnerable
Debianotrs2112.0.99beta1-1vulnerable
Debianotrs2112.0.99beta1-2vulnerable
Debianotrs2112.1.1-1vulnerable
Debianotrs2112.1.3-1vulnerable
Debianotrs2112.1.4-1vulnerable
Debianotrs2112.1.4-2vulnerable
Debianotrs2112.1.5-1vulnerable
Debianotrs2112.1.5-2vulnerable
Debianotrs2112.1.5-3vulnerable
Debianotrs2112.1.6-1vulnerable
Debianotrs2112.1.7-1vulnerable
Debianotrs2112.1.7-2vulnerable
Debianotrs2112.2.0~beta2-1vulnerable
Debianotrs2112.2.0~beta3-1vulnerable
Debianotrs2112.2.1-1vulnerable
Debianotrs2112.2.2-1vulnerable
Debianotrs2112.2.3-1vulnerable
Debianotrs2112.2.4-1vulnerable
Debianotrs2112.2.5-1vulnerable
Debianotrs2112.2.5-2vulnerable
Debianotrs2112.2.6-1vulnerable
Debianotrs2112.2.7-1vulnerable
Debianotrs2112.2.7-2vulnerable
Debianotrs2112.2.7-2lenny1vulnerable
Debianotrs2112.2.7-2lenny2vulnerable
Debianotrs2112.2.7-2lenny3vulnerable
Debianotrs2112.2.7-3vulnerable
Debianotrs2112.3.2-1vulnerable
Debianotrs2112.3.2-2vulnerable
Debianotrs2112.3.3-1vulnerable
Debianotrs2112.3.4-1vulnerable
Debianotrs2112.3.4-2vulnerable
Debianotrs2112.3.4-3vulnerable
Debianotrs2112.3.4-4vulnerable
Debianotrs2112.3.4-5vulnerable
Debianotrs2112.3.4-6vulnerable
Debianotrs2112.3.4-7vulnerable
Debianotrs2112.4.10+dfsg1-1vulnerable
Debianotrs2112.4.10+dfsg1-2vulnerable
Debianotrs2112.4.10+dfsg1-3vulnerable
Debianotrs2112.4.5-1vulnerable
Debianotrs2112.4.5-2vulnerable
Debianotrs2112.4.5-3vulnerable
Debianotrs2112.4.5-4vulnerable
Debianotrs2112.4.5-5vulnerable
Debianotrs2112.4.6-1vulnerable
Debianotrs2112.4.6-2vulnerable
Debianotrs2112.4.7+dfsg1-1vulnerable
Debianotrs2112.4.7-1vulnerable
Debianotrs2112.4.7-2vulnerable
Debianotrs2112.4.7-3vulnerable
Debianotrs2112.4.7-4vulnerable
Debianotrs2112.4.7-5vulnerable
Debianotrs2112.4.7-6vulnerable
Debianotrs2112.4.8+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-2vulnerable
Debianotrs2112.4.9+dfsg1-3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze4vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze5vulnerable
Debianotrs2112.4.9+dfsg1-4vulnerable
Debianotrs2112.4.9+dfsg1-5vulnerable
Debianotrs2113.0.10+dfsg1-1vulnerable
Debianotrs2113.0.10+dfsg1-2vulnerable
Debianotrs2113.0.11+dfsg1-1vulnerable
Debianotrs2113.0.8+dfsg1-1vulnerable
Debianotrs2113.0.9+dfsg1-1vulnerable
Debianotrs2113.1.0~beta4+dfsg1-1vulnerable
Debianotrs2113.1.0~beta5+dfsg1-1vulnerable
Debianotrs2113.1.0~rc1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-2vulnerable
Debianotrs2113.1.10+dfsg1-1vulnerable
Debianotrs2113.1.11+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-2vulnerable
Debianotrs2113.1.12+dfsg1-3vulnerable
Debianotrs2113.1.2+dfsg1-1vulnerable
Debianotrs2113.1.2+dfsg1-2vulnerable
Debianotrs2113.1.2+dfsg1-3vulnerable
Debianotrs2113.1.3+dfsg1-1vulnerable
Debianotrs2113.1.3+dfsg1-2vulnerable
Debianotrs2113.1.4+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-2vulnerable
Debianotrs2113.1.5+dfsg1-3vulnerable
Debianotrs2113.1.6+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-2vulnerable
Debianotrs2113.1.7+dfsg1-3vulnerable
Debianotrs2113.1.7+dfsg1-4vulnerable
Debianotrs2113.1.7+dfsg1-5vulnerable
Debianotrs2113.1.7+dfsg1-6vulnerable
Debianotrs2113.1.7+dfsg1-7vulnerable
Debianotrs2113.1.7+dfsg1-8vulnerable
Debianotrs2113.1.8+dfsg1-1vulnerable
Debianotrs2113.1.9+dfsg1-1vulnerable
Debianotrs2113.2.1+dfsg1-1vulnerable
Debianotrs2113.2.10-1vulnerable
Debianotrs2113.2.10-2vulnerable
Debianotrs2113.2.11-1vulnerable
Debianotrs2113.2.11-1~bpo70+1vulnerable
Debianotrs2113.2.12-1vulnerable
Debianotrs2113.2.2+dfsg1-1vulnerable
Debianotrs2113.2.3+dfsg1-1vulnerable
Debianotrs2113.2.4-1vulnerable
Debianotrs2113.2.5-1vulnerable
Debianotrs2113.2.6-1vulnerable
Debianotrs2113.2.6-2vulnerable
Debianotrs2113.2.7-1vulnerable
Debianotrs2113.2.7-2vulnerable
Debianotrs2113.2.8-1vulnerable
Debianotrs2113.2.9-1vulnerable
Debianotrs2113.2.9-2vulnerable
Debianotrs2113.3.1-1vulnerable
Debianotrs2113.3.10-1vulnerable
Debianotrs2113.3.11-1vulnerable
Debianotrs2113.3.18-1~deb7u1vulnerable
Debianotrs2113.3.18-1~deb7u2vulnerable
Debianotrs2113.3.18-1~deb7u3vulnerable
Debianotrs2113.3.2-1vulnerable
Debianotrs2113.3.3-1vulnerable
Debianotrs2113.3.3-2vulnerable
Debianotrs2113.3.3-3vulnerable
Debianotrs2113.3.4-1vulnerable
Debianotrs2113.3.5-1vulnerable
Debianotrs2113.3.6-1vulnerable
Debianotrs2113.3.7-1vulnerable
Debianotrs2113.3.7-2vulnerable
Debianotrs2113.3.8-1vulnerable
Debianotrs2113.3.9-1vulnerable
Debianotrs2113.3.9-2vulnerable
Debianotrs2113.3.9-3vulnerable
Debianotrs2113.3.9-3~bpo70+1vulnerable
Debianotrs2114.0.10-1vulnerable
Debianotrs2114.0.11-1vulnerable
Debianotrs2114.0.12-1vulnerable
Debianotrs2114.0.13-1vulnerable
Debianotrs2114.0.13-1~bpo8+1vulnerable
Debianotrs2114.0.5-1vulnerable
Debianotrs2114.0.5-2vulnerable
Debianotrs2114.0.6-1vulnerable
Debianotrs2114.0.7-1vulnerable
Debianotrs2114.0.7-2vulnerable
Debianotrs2114.0.8-1vulnerable
Debianotrs2114.0.9-1vulnerable
Debianotrs2115.0.1-1vulnerable
Debianotrs2115.0.1-2vulnerable
Debianotrs2115.0.10-1vulnerable
Debianotrs2115.0.10-1~bpo8+1vulnerable
Debianotrs2115.0.11-1vulnerable
Debianotrs2115.0.12-1vulnerable
Debianotrs2115.0.13-1vulnerable
Debianotrs2115.0.13-1~bpo8+1vulnerable
Debianotrs2115.0.13-2vulnerable
Debianotrs2115.0.14-1vulnerable
Debianotrs2115.0.14-1~bpo8+1vulnerable
Debianotrs2115.0.15-1vulnerable
Debianotrs2115.0.16-1vulnerable
Debianotrs2115.0.16-1~bpo8+1vulnerable
Debianotrs2115.0.17-1vulnerable
Debianotrs2115.0.18-1vulnerable
Debianotrs2115.0.19-1vulnerable
Debianotrs2115.0.2-1vulnerable
Debianotrs2115.0.20-1vulnerable
Debianotrs2115.0.21-1vulnerable
Debianotrs2115.0.21-1~bpo9+1vulnerable
Debianotrs2115.0.22-1vulnerable
Debianotrs2115.0.23-1vulnerable
Debianotrs2115.0.23-1~bpo9+1vulnerable
Debianotrs2115.0.24-1vulnerable
Debianotrs2115.0.24-1~bpo9+1vulnerable
Debianotrs2115.0.3-1vulnerable
Debianotrs2115.0.5-1vulnerable
Debianotrs2115.0.6-1vulnerable
Debianotrs2115.0.6-1~bpo8+1vulnerable
Debianotrs2115.0.7-1vulnerable
Debianotrs2115.0.8+dfsg1-1vulnerable
Debianotrs2115.0.8-1vulnerable
Debianotrs2115.0.8-1~bpo8+1vulnerable
Debianotrs2115.0.9+dfsg1-1vulnerable
Debianotrs2115.0.9+repack1-1vulnerable
Debianotrs2116.0.1-1vulnerable
Debianotrs2116.0.10-1vulnerable
Debianotrs2116.0.11-1vulnerable
Debianotrs2116.0.11-1~bpo9+1vulnerable
Debianotrs2116.0.12-1vulnerable
Debianotrs2116.0.12-1~bpo9+1vulnerable
Debianotrs2116.0.13-1vulnerable
Debianotrs2116.0.14-1vulnerable
Debianotrs2116.0.15-1vulnerable
Debianotrs2116.0.16-1vulnerable
Debianotrs2116.0.16-2vulnerable
Debianotrs2116.0.17-1vulnerable
Debianotrs2116.0.18-1vulnerable
Debianotrs2116.0.19-1vulnerable
Debianotrs2116.0.2-1vulnerable
Debianotrs2116.0.20-1vulnerable
Debianotrs2116.0.20-1~bpo10+1vulnerable
Debianotrs2116.0.21-1vulnerable
Debianotrs2116.0.22-1vulnerable
Debianotrs2116.0.23-1vulnerable
Debianotrs2116.0.23-2vulnerable
Debianotrs2116.0.24-1vulnerable
Debianotrs2116.0.24-1~bpo10+1vulnerable
Debianotrs2116.0.25-1vulnerable
Debianotrs2116.0.25-2vulnerable
Debianotrs2116.0.25-3vulnerable
Debianotrs2116.0.25-3~bpo10+1vulnerable
Debianotrs2116.0.26-1vulnerable
Debianotrs2116.0.26-1~bpo10+1vulnerable
Debianotrs2116.0.27-1vulnerable
Debianotrs2116.0.27-1~bpo10+1vulnerable
Debianotrs2116.0.28-1vulnerable
Debianotrs2116.0.28-1~bpo10+1vulnerable
Debianotrs2116.0.28-2vulnerable
Debianotrs2116.0.29-1vulnerable
Debianotrs2116.0.29-1~bpo10+1vulnerable
Debianotrs2116.0.3-1vulnerable
Debianotrs2116.0.30-1vulnerable
Debianotrs2116.0.30-1~bpo10+1vulnerable
Debianotrs2116.0.30-2vulnerable
Debianotrs2116.0.32-1vulnerable
Debianotrs2116.0.32-2vulnerable
Debianotrs2116.0.32-2~bpo10+1vulnerable
Debianotrs2116.0.32-4vulnerable
Debianotrs2116.0.32-5vulnerable
Debianotrs2116.0.32-5~bpo10+1vulnerable
Debianotrs2116.0.32-6vulnerable
Debianotrs2116.0.36-2vulnerable
Debianotrs2116.0.36-2~bpo11+1vulnerable
Debianotrs2116.0.4-1vulnerable
Debianotrs2116.0.5-1vulnerable
Debianotrs2116.0.6-1vulnerable
Debianotrs2116.0.7-1vulnerable
Debianotrs2116.0.8-1vulnerable
Debianotrs2116.0.8-1~bpo9+1vulnerable
Debianotrs2116.0.9-1vulnerable
Debianotrs2116.0.9-1~bpo9+1vulnerable
Debianotrs2116.1.2-1vulnerable
Debianotrs2116.1.2-1~bpo11+1vulnerable
Debianotrs2116.2.1-1vulnerable
Debianotrs2116.2.2-1vulnerable
Debianotrs2116.2.2-2vulnerable
Debianotrs2116.3.1-1vulnerable
Debianotrs2116.3.2-1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]