Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19090
HistorySep 08, 2021 - 12:00 a.m.

libspf2 buffer overflow vulnerability

2021-09-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.003 Low

EPSS

Percentile

70.9%

libspf2 is a library that allows email systems such as Sendmail, Postfix, Exim, Zmailer, and MS Exchange to check SPF records and ensure that email is authorized from its domain. libspf2 suffers from a buffer overflow vulnerability, which stems from the fact that libspf2’s SPF macro can trigger a a buffer overflow, which can be exploited by an attacker to cause a denial of service and possibly run code.

CPENameOperatorVersion
libspf2 libspf2le1.2.11