CVE catalog

CVE-2019-18180

UBUNTU-CVE-2019-18180

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.57% · Oct 25, 2026

Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: ((OTRS)) Community Edition 5.0.x version 5.0.38 and prior versions; 6.0.x version 6.0.23 and prior versions. OTRS AG: OTRS 7.0.x version 7.0.12 and prior versions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianotrs2112.0.4p01-10vulnerable
Debianotrs2112.0.4p01-11vulnerable
Debianotrs2112.0.4p01-12vulnerable
Debianotrs2112.0.4p01-13vulnerable
Debianotrs2112.0.4p01-14vulnerable
Debianotrs2112.0.4p01-14.1vulnerable
Debianotrs2112.0.4p01-15vulnerable
Debianotrs2112.0.4p01-16vulnerable
Debianotrs2112.0.4p01-17vulnerable
Debianotrs2112.0.4p01-18vulnerable
Debianotrs2112.0.4p01-6vulnerable
Debianotrs2112.0.4p01-7vulnerable
Debianotrs2112.0.4p01-8vulnerable
Debianotrs2112.0.4p01-9vulnerable
Debianotrs2112.0.99beta1-1vulnerable
Debianotrs2112.0.99beta1-2vulnerable
Debianotrs2112.1.1-1vulnerable
Debianotrs2112.1.3-1vulnerable
Debianotrs2112.1.4-1vulnerable
Debianotrs2112.1.4-2vulnerable
Debianotrs2112.1.5-1vulnerable
Debianotrs2112.1.5-2vulnerable
Debianotrs2112.1.5-3vulnerable
Debianotrs2112.1.6-1vulnerable
Debianotrs2112.1.7-1vulnerable
Debianotrs2112.1.7-2vulnerable
Debianotrs2112.2.0~beta2-1vulnerable
Debianotrs2112.2.0~beta3-1vulnerable
Debianotrs2112.2.1-1vulnerable
Debianotrs2112.2.2-1vulnerable
Debianotrs2112.2.3-1vulnerable
Debianotrs2112.2.4-1vulnerable
Debianotrs2112.2.5-1vulnerable
Debianotrs2112.2.5-2vulnerable
Debianotrs2112.2.6-1vulnerable
Debianotrs2112.2.7-1vulnerable
Debianotrs2112.2.7-2vulnerable
Debianotrs2112.2.7-2lenny1vulnerable
Debianotrs2112.2.7-2lenny2vulnerable
Debianotrs2112.2.7-2lenny3vulnerable
Debianotrs2112.2.7-3vulnerable
Debianotrs2112.3.2-1vulnerable
Debianotrs2112.3.2-2vulnerable
Debianotrs2112.3.3-1vulnerable
Debianotrs2112.3.4-1vulnerable
Debianotrs2112.3.4-2vulnerable
Debianotrs2112.3.4-3vulnerable
Debianotrs2112.3.4-4vulnerable
Debianotrs2112.3.4-5vulnerable
Debianotrs2112.3.4-6vulnerable
Debianotrs2112.3.4-7vulnerable
Debianotrs2112.4.10+dfsg1-1vulnerable
Debianotrs2112.4.10+dfsg1-2vulnerable
Debianotrs2112.4.10+dfsg1-3vulnerable
Debianotrs2112.4.5-1vulnerable
Debianotrs2112.4.5-2vulnerable
Debianotrs2112.4.5-3vulnerable
Debianotrs2112.4.5-4vulnerable
Debianotrs2112.4.5-5vulnerable
Debianotrs2112.4.6-1vulnerable
Debianotrs2112.4.6-2vulnerable
Debianotrs2112.4.7+dfsg1-1vulnerable
Debianotrs2112.4.7-1vulnerable
Debianotrs2112.4.7-2vulnerable
Debianotrs2112.4.7-3vulnerable
Debianotrs2112.4.7-4vulnerable
Debianotrs2112.4.7-5vulnerable
Debianotrs2112.4.7-6vulnerable
Debianotrs2112.4.8+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-2vulnerable
Debianotrs2112.4.9+dfsg1-3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze4vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze5vulnerable
Debianotrs2112.4.9+dfsg1-4vulnerable
Debianotrs2112.4.9+dfsg1-5vulnerable
Debianotrs2113.0.10+dfsg1-1vulnerable
Debianotrs2113.0.10+dfsg1-2vulnerable
Debianotrs2113.0.11+dfsg1-1vulnerable
Debianotrs2113.0.8+dfsg1-1vulnerable
Debianotrs2113.0.9+dfsg1-1vulnerable
Debianotrs2113.1.0~beta4+dfsg1-1vulnerable
Debianotrs2113.1.0~beta5+dfsg1-1vulnerable
Debianotrs2113.1.0~rc1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-2vulnerable
Debianotrs2113.1.10+dfsg1-1vulnerable
Debianotrs2113.1.11+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-2vulnerable
Debianotrs2113.1.12+dfsg1-3vulnerable
Debianotrs2113.1.2+dfsg1-1vulnerable
Debianotrs2113.1.2+dfsg1-2vulnerable
Debianotrs2113.1.2+dfsg1-3vulnerable
Debianotrs2113.1.3+dfsg1-1vulnerable
Debianotrs2113.1.3+dfsg1-2vulnerable
Debianotrs2113.1.4+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-2vulnerable
Debianotrs2113.1.5+dfsg1-3vulnerable
Debianotrs2113.1.6+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-2vulnerable
Debianotrs2113.1.7+dfsg1-3vulnerable
Debianotrs2113.1.7+dfsg1-4vulnerable
Debianotrs2113.1.7+dfsg1-5vulnerable
Debianotrs2113.1.7+dfsg1-6vulnerable
Debianotrs2113.1.7+dfsg1-7vulnerable
Debianotrs2113.1.7+dfsg1-8vulnerable
Debianotrs2113.1.8+dfsg1-1vulnerable
Debianotrs2113.1.9+dfsg1-1vulnerable
Debianotrs2113.2.1+dfsg1-1vulnerable
Debianotrs2113.2.10-1vulnerable
Debianotrs2113.2.10-2vulnerable
Debianotrs2113.2.11-1vulnerable
Debianotrs2113.2.11-1~bpo70+1vulnerable
Debianotrs2113.2.12-1vulnerable
Debianotrs2113.2.2+dfsg1-1vulnerable
Debianotrs2113.2.3+dfsg1-1vulnerable
Debianotrs2113.2.4-1vulnerable
Debianotrs2113.2.5-1vulnerable
Debianotrs2113.2.6-1vulnerable
Debianotrs2113.2.6-2vulnerable
Debianotrs2113.2.7-1vulnerable
Debianotrs2113.2.7-2vulnerable
Debianotrs2113.2.8-1vulnerable
Debianotrs2113.2.9-1vulnerable
Debianotrs2113.2.9-2vulnerable
Debianotrs2113.3.1-1vulnerable
Debianotrs2113.3.10-1vulnerable
Debianotrs2113.3.11-1vulnerable
Debianotrs2113.3.18-1~deb7u1vulnerable
Debianotrs2113.3.18-1~deb7u2vulnerable
Debianotrs2113.3.18-1~deb7u3vulnerable
Debianotrs2113.3.2-1vulnerable
Debianotrs2113.3.3-1vulnerable
Debianotrs2113.3.3-2vulnerable
Debianotrs2113.3.3-3vulnerable
Debianotrs2113.3.4-1vulnerable
Debianotrs2113.3.5-1vulnerable
Debianotrs2113.3.6-1vulnerable
Debianotrs2113.3.7-1vulnerable
Debianotrs2113.3.7-2vulnerable
Debianotrs2113.3.8-1vulnerable
Debianotrs2113.3.9-1vulnerable
Debianotrs2113.3.9-2vulnerable
Debianotrs2113.3.9-3vulnerable
Debianotrs2113.3.9-3~bpo70+1vulnerable
Debianotrs2114.0.10-1vulnerable
Debianotrs2114.0.11-1vulnerable
Debianotrs2114.0.12-1vulnerable
Debianotrs2114.0.13-1vulnerable
Debianotrs2114.0.13-1~bpo8+1vulnerable
Debianotrs2114.0.5-1vulnerable
Debianotrs2114.0.5-2vulnerable
Debianotrs2114.0.6-1vulnerable
Debianotrs2114.0.7-1vulnerable
Debianotrs2114.0.7-2vulnerable
Debianotrs2114.0.8-1vulnerable
Debianotrs2114.0.9-1vulnerable
Debianotrs2115.0.1-1vulnerable
Debianotrs2115.0.1-2vulnerable
Debianotrs2115.0.10-1vulnerable
Debianotrs2115.0.10-1~bpo8+1vulnerable
Debianotrs2115.0.11-1vulnerable
Debianotrs2115.0.12-1vulnerable
Debianotrs2115.0.13-1vulnerable
Debianotrs2115.0.13-1~bpo8+1vulnerable
Debianotrs2115.0.13-2vulnerable
Debianotrs2115.0.14-1vulnerable
Debianotrs2115.0.14-1~bpo8+1vulnerable
Debianotrs2115.0.15-1vulnerable
Debianotrs2115.0.16-1vulnerable
Debianotrs2115.0.16-1~bpo8+1vulnerable
Debianotrs2115.0.17-1vulnerable
Debianotrs2115.0.18-1vulnerable
Debianotrs2115.0.19-1vulnerable
Debianotrs2115.0.2-1vulnerable
Debianotrs2115.0.20-1vulnerable
Debianotrs2115.0.21-1vulnerable
Debianotrs2115.0.21-1~bpo9+1vulnerable
Debianotrs2115.0.22-1vulnerable
Debianotrs2115.0.23-1vulnerable
Debianotrs2115.0.23-1~bpo9+1vulnerable
Debianotrs2115.0.24-1vulnerable
Debianotrs2115.0.24-1~bpo9+1vulnerable
Debianotrs2115.0.3-1vulnerable
Debianotrs2115.0.5-1vulnerable
Debianotrs2115.0.6-1vulnerable
Debianotrs2115.0.6-1~bpo8+1vulnerable
Debianotrs2115.0.7-1vulnerable
Debianotrs2115.0.8+dfsg1-1vulnerable
Debianotrs2115.0.8-1vulnerable
Debianotrs2115.0.8-1~bpo8+1vulnerable
Debianotrs2115.0.9+dfsg1-1vulnerable
Debianotrs2115.0.9+repack1-1vulnerable
Debianotrs2116.0.1-1vulnerable
Debianotrs2116.0.10-1vulnerable
Debianotrs2116.0.11-1vulnerable
Debianotrs2116.0.11-1~bpo9+1vulnerable
Debianotrs2116.0.12-1vulnerable
Debianotrs2116.0.12-1~bpo9+1vulnerable
Debianotrs2116.0.13-1vulnerable
Debianotrs2116.0.14-1vulnerable
Debianotrs2116.0.15-1vulnerable
Debianotrs2116.0.16-1vulnerable
Debianotrs2116.0.16-2vulnerable
Debianotrs2116.0.17-1vulnerable
Debianotrs2116.0.18-1vulnerable
Debianotrs2116.0.19-1vulnerable
Debianotrs2116.0.2-1vulnerable
Debianotrs2116.0.20-1vulnerable
Debianotrs2116.0.20-1~bpo10+1vulnerable
Debianotrs2116.0.21-1vulnerable
Debianotrs2116.0.22-1vulnerable
Debianotrs2116.0.23-1vulnerable
Debianotrs2116.0.23-2vulnerable
Debianotrs2116.0.24-1~bpo10+1vulnerable
Debianotrs2116.0.3-1vulnerable
Debianotrs2116.0.4-1vulnerable
Debianotrs2116.0.5-1vulnerable
Debianotrs2116.0.6-1vulnerable
Debianotrs2116.0.7-1vulnerable
Debianotrs2116.0.8-1vulnerable
Debianotrs2116.0.8-1~bpo9+1vulnerable
Debianotrs2116.0.9-1vulnerable
Debianotrs2116.0.9-1~bpo9+1vulnerable
Debianotrs2116.0.24-1fixed
Ubuntuotrs216.044.0.10-1vulnerable
Ubuntuotrs216.045.0.1-1vulnerable
Ubuntuotrs216.045.0.1-2vulnerable
Ubuntuotrs216.045.0.2-1vulnerable
Ubuntuotrs216.045.0.3-1vulnerable
Ubuntuotrs216.045.0.5-1vulnerable
Ubuntuotrs216.045.0.6-1vulnerable
Ubuntuotrs216.045.0.7-1vulnerable
Ubuntuotrs218.045.0.23-1vulnerable
Ubuntuotrs218.045.0.24-1vulnerable
Ubuntuotrs218.046.0.1-1vulnerable
Ubuntuotrs218.046.0.2-1vulnerable
Ubuntuotrs218.046.0.3-1vulnerable
Ubuntuotrs218.046.0.4-1vulnerable
Ubuntuotrs218.046.0.5-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianotrs2deb116.0.24-1Not reportedDEBIAN-CVE-2019-18180Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]