Lucene search
GoogleOSV:OPENSUSE-SU-2024:0243-1HistoryAug 16, 2024 - 4:02 a.m.
Security update for python-aiosmtpd
2024-08-1604:02:47
Google
osv.dev
1
python
aiosmtpd
security update
mitm attack
smtp smuggling
CVSS3
5.4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.4
Confidence
Low
This update for python-aiosmtpd fixes the following issues:
- CVE-2024-34083: Fixed MiTM attack could inject extra unencrypted commands after STARTTLS (boo#1224467)
- CVE-2024-27305: Fixed SMTP smuggling (boo#1221328)
Related
nessus
nessus
openSUSE 15 Security Update : python-aiosmtpd (openSUSE-SU-2024:0243-1)
2024-08-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for python (openSUSE-SU-2024:0243-1)
2024-08-17 00:00:00
debiancve
debiancve
CVE-2024-34083
2024-05-18 19:15:49
CVE-2024-27305
2024-03-12 21:15:58
osv
osv
aiosmtpd STARTTLS unencrypted commands injection
2024-05-20 14:59:07
CVE-2024-34083
2024-05-18 19:15:49
aiosmtpd vulnerable to SMTP smuggling
2024-03-13 15:33:14
ubuntucve
ubuntucve
CVE-2024-27305
2024-03-12 00:00:00
CVE-2024-34083
2024-05-18 00:00:00
vulnrichment
vulnrichment
CVE-2024-27305 SMTP smuggling in aiosmtpd
2024-03-12 20:29:54
CVE-2024-34083 STARTTLS unencrypted commands injection
2024-05-18 18:12:19
github
github
aiosmtpd vulnerable to SMTP smuggling
2024-03-13 15:33:14
aiosmtpd STARTTLS unencrypted commands injection
2024-05-20 14:59:07
prion
prion
Design/Logic Flaw
2024-03-12 21:15:00
cvelist
cvelist
CVE-2024-27305 SMTP smuggling in aiosmtpd
2024-03-12 20:29:54
CVE-2024-34083 STARTTLS unencrypted commands injection
2024-05-18 18:12:19
cve
cve
CVE-2024-34083
2024-05-18 19:15:49
CVE-2024-27305
2024-03-12 21:15:58
veracode
veracode
Man-in-the-Middle (MITM)
2024-05-22 07:08:47
SMTP Smuggling
2024-03-13 07:31:39
nvd
nvd
CVE-2024-34083
2024-05-18 19:15:49
CVE-2024-27305
2024-03-12 21:15:58
CVSS3
5.4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.4
Confidence
Low
Related for OSV:OPENSUSE-SU-2024:0243-1