CVE-2021-20314

🗓️ 12 Aug 2021 14:37:09Reported by redhatType

Stack buffer overflow in libspf2 can lead to DoS and code execution via malicious SPF explanation messages

Reporter	Title	Published	Views	Family All 53
AlpineLinux	CVE-2021-20314	12 Aug 202114:37	–	alpinelinux
Circl	CVE-2021-20314	12 Aug 202118:39	–	circl
CNNVD	libspf2 缓冲区错误漏洞	11 Aug 202100:00	–	cnnvd
CNVD	libspf2 buffer overflow vulnerability	8 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-20314	12 Aug 202114:37	–	cvelist
Debian	[SECURITY] [DLA 2739-1] libspf2 security update	11 Aug 202115:43	–	debian
Debian	[SECURITY] [DSA 4955-1] libspf2 security update	11 Aug 202115:12	–	debian
Debian	[SECURITY] [DSA 4955-1] libspf2 security update	11 Aug 202115:12	–	debian
Debian CVE	CVE-2021-20314	12 Aug 202114:37	–	debiancve
Tenable Nessus	Debian DLA-2739-1 : libspf2 - LTS security update	12 Aug 202100:00	–	nessus

NVD

Vulners

Node

libspf2 libspf2Range<1.2.11

Node

redhat enterprise_linuxMatch7.0

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "product": "libspf2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.11"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202401-22
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMSFT2NJDZ7PATRZSQPAOGSE7JD6ELOB/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6T4HYXXSUQCGJB2ES6X7Q74YYF7V7XU/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJRHPE5OSCPTNA3ZZ4ORDHT4JQH3Y4/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 Nov 2024 05:46Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.00169

CWE-787