CVE-2023-29323

2023-04-0423:15:07

[email protected]

web.nvd.nist.gov

cve-2023-29323

openbsd

smtpd

opensmtpd portable

vulnerability

connection

ipv6

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

14.4%

JSON

ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address.

Affected configurations

Nvd

Node

opensmtpdopensmtpdRange<7.0.0

openbsdopenbsdMatch7.1

openbsdopenbsdMatch7.2

VendorProductVersionCPE
opensmtpdopensmtpd*cpe:2.3:a:opensmtpd:opensmtpd:*:*:*:*:*:*:*:*
openbsdopenbsd7.1cpe:2.3:o:openbsd:openbsd:7.1:*:*:*:*:*:*:*
openbsdopenbsd7.2cpe:2.3:o:openbsd:openbsd:7.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opensmtpd	opensmtpd	*	cpe:2.3:a:opensmtpd:opensmtpd::::::::
openbsd	openbsd	7.1	cpe:2.3:o:openbsd:openbsd:7.1:::::::*
openbsd	openbsd	7.2	cpe:2.3:o:openbsd:openbsd:7.2:::::::*