CVE-2022-29700: 
NixOS vulnerability analysis and mitigation

A denial of service vulnerability was discovered in Zammad versions 5.1.x (CVE-2022-29700), identified on April 20, 2022. The vulnerability was related to missing length restrictions in user password configurations (Zammad Advisory).

The vulnerability stems from a missing length restriction in the password configuration functionality, which allowed users to set extremely long passwords. During password verification, these exceptionally long passwords could cause the Zammad server to experience denial of service conditions (Zammad Advisory).

When exploited, this vulnerability could cause denial of service on the Zammad server during password verification processes, potentially affecting system availability and performance (Zammad Advisory).

The vulnerability could be exploited by configuring extremely long user passwords in affected Zammad installations. The severity of this vulnerability was rated as 'low' by the vendor (Zammad Advisory).

The vulnerability was fixed in Zammad version 5.1.1. Users are recommended to upgrade to this or later versions. Updates can be obtained through the official Zammad website, FTP server, or through OS package managers (Zammad Advisory).