Candidate: CVE-2014-9472 PublicDate: 2015-03-09 14:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9472 Description: The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Christian Loos Assigned-to: CVSS: Patches_request-tracker3.8: upstream_request-tracker3.8: needs-triage lucid_request-tracker3.8: ignored (reached end-of-life) precise_request-tracker3.8: ignored (reached end-of-life) precise/esm_request-tracker3.8: DNE (precise was needs-triage) trusty_request-tracker3.8: DNE trusty/esm_request-tracker3.8: DNE utopic_request-tracker3.8: DNE vivid_request-tracker3.8: DNE vivid/stable-phone-overlay_request-tracker3.8: DNE vivid/ubuntu-core_request-tracker3.8: DNE wily_request-tracker3.8: DNE xenial_request-tracker3.8: DNE yakkety_request-tracker3.8: DNE zesty_request-tracker3.8: DNE artful_request-tracker3.8: DNE bionic_request-tracker3.8: DNE cosmic_request-tracker3.8: DNE disco_request-tracker3.8: DNE devel_request-tracker3.8: DNE Patches_request-tracker4: upstream_request-tracker4: released (4.2.8-3) lucid_request-tracker4: DNE precise_request-tracker4: ignored (reached end-of-life) precise/esm_request-tracker4: DNE (precise was needed) trusty_request-tracker4: ignored (reached end-of-life) trusty/esm_request-tracker4: DNE (trusty was needed) utopic_request-tracker4: ignored (reached end-of-life) vivid_request-tracker4: not-affected (4.2.8-3) vivid/stable-phone-overlay_request-tracker4: DNE vivid/ubuntu-core_request-tracker4: DNE wily_request-tracker4: not-affected (4.2.8-3) xenial_request-tracker4: not-affected (4.2.8-3) yakkety_request-tracker4: not-affected (4.2.8-3) zesty_request-tracker4: not-affected (4.2.8-3) artful_request-tracker4: not-affected (4.2.8-3) bionic_request-tracker4: not-affected (4.2.8-3) cosmic_request-tracker4: not-affected (4.2.8-3) disco_request-tracker4: not-affected (4.2.8-3) devel_request-tracker4: not-affected (4.2.8-3)