Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19088
HistoryJan 25, 2022 - 12:00 a.m.

libspf2 buffer overflow vulnerability (CNVD-2022-19088)

2022-01-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.038 Low

EPSS

Percentile

91.9%

libspf2 is a library that allows email systems (such as Sendmail, Postfix, Exim, Zmailer, and MS Exchange) to check SPF records and ensure that an email is authorized from its domain. This prevents email forgery commonly used by spammers, scammers and email viruses/worms. libspf2 suffers from a buffer overflow vulnerability that could be exploited by an attacker to execute arbitrary code through a specific SPF DNS record.

CPENameOperatorVersion
libspf2 libspf2le1.2.11