Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19089
HistoryJan 25, 2022 - 12:00 a.m.

libspf2 buffer overflow vulnerability (CNVD-2022-19089)

2022-01-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.017 Low

EPSS

Percentile

87.7%

libspf2 is a library that allows email systems (such as Sendmail, Postfix, Exim, Zmailer, and MS Exchange) to check SPF records and ensure that email is authorized from its domain. This prevents email forgery commonly used by spammers, scammers and email viruses/worms. libspf2 suffers from a buffer overflow vulnerability that could be exploited by remote attackers to execute arbitrary code using a specific SPF DNS record.

CPENameOperatorVersion
libspf2 libspf2le1.2.11