Denial of Service in Best Practical Request Tracker

CVE-2018-18898

What is CVE-2018-18898?

The email ingestion feature in Best Practical Request Tracker versions 4.1.13 through 4.4 is susceptible to a denial of service attack. This vulnerability is triggered by remote attackers launching algorithmic complexity attacks during the email address parsing process, which could render the affected system inoperable. It is crucial to apply the appropriate patches and updates to mitigate this risk and ensure the continuous availability of the Request Tracker application.

References