Lucene search
K

14 matches found

OSV
OSV
added 2025/11/20 4:16 p.m.1 views

UBUNTU-CVE-2025-62875

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1...

6.9CVSS5.8AI score0.00036EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2025/11/12 12:0 a.m.1 views

OpenSMTPD < 6.6.4 Multiple Vulnerabilities (Feb 2020)

OpenSMTPD is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:opensmtpd"; ifdescription...

10CVSS7.8AI score0.88136EPSS
Exploits14References4
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-8793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSMTPD before 6.6.4 allows local users to read arbitrary files e.g., on some Linux distributions because of a combination of an untrusted search path in...

4.7CVSS5.2AI score0.00786EPSS
Exploits4References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-8794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mtaio in mtasession.c for multi-line replies. Although this vulnerabilit...

10CVSS9.2AI score0.88136EPSS
Exploits10References2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-35680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daem...

7.5CVSS7.2AI score0.05798EPSS
Exploits0References2
OSV
OSV
added 2023/04/04 11:15 p.m.1 views

DEBIAN-CVE-2023-29323

asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address...

7.8CVSS7.4AI score0.00063EPSS
Exploits0References1
OSV
OSV
added 2020/12/24 4:15 p.m.1 views

DEBIAN-CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

7.5CVSS7.3AI score0.05798EPSS
Exploits0References1
OSV
OSV
added 2020/12/24 4:15 p.m.0 views

UBUNTU-CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

7.5CVSS5.8AI score0.05798EPSS
Exploits0References5
OSV
OSV
added 2020/12/24 4:15 p.m.0 views

UBUNTU-CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

7.5CVSS7.1AI score0.02372EPSS
Exploits0References5
CNNVD
CNNVD
added 2020/12/24 12:0 a.m.2 views

Openbsd Opensmtpd 代码问题漏洞

OpenSMTPD is a Unix daemon that implements the Simple Mail Transfer Protocol for delivering mail on the local computer or relaying mail to other SMTP servers. A null pointer dereference vulnerability exists in smtpd/lkafilter.c in versions of OpenSMTPD prior to 6.8.0p1. The vulnerability stems fr...

7.5CVSS7.2AI score0.05798EPSS
Exploits0References10
The Hacker News
The Hacker News
added 2020/02/25 10:54 a.m.0 views

New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers

OpenSMTPD has been found vulnerable to yet another critical vulnerability that could allow remote attackers to take complete control over email servers running BSD or Linux operating systems. OpenSMTPD , also known as OpenBSD SMTP Server, is an open-source implementation of the Simple Mail Transf...

10CVSS7.9AI score0.88136EPSS
Exploits10
The Hacker News
The Hacker News
added 2020/01/30 9:7 a.m.3 views

Critical OpenSMTPD Bug Opens Linux and OpenBSD Mail Servers to Hackers

Cybersecurity researchers have discovered a new critical vulnerability CVE-2020-7247 in the OpenSMTPD email server that could allow remote attackers to take complete control over BSD and many Linux based servers. OpenSMTPD is an open-source implementation of the server-side SMTP protocol that was...

10CVSS7.8AI score0.94108EPSS
Exploits26
BDU FSTEC
BDU FSTEC
added 2017/11/23 12:0 a.m.2 views

The vulnerability of the OpenSMTPD mail daemon on the Fedora operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the OpenSMTPD mail daemon in the Fedora operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using the structures reqcavrfysmtp, reqcavrfymta, and...

9.8CVSS8.2AI score0.10142EPSS
Exploits1References8Affected Software2
CNVD
CNVD
added 2015/11/10 12:0 a.m.1 views

OpenSMTPD has multiple vulnerabilities (CNVD-2015-07458)

OpenSMTPD is a free server-side implementation of the SMTP protocol developed by the OpenBSD team, defined via RFC5321 and part of the OpenBSD project. A security vulnerability exists in versions prior to OpenSMTPD 5.7.3, which can be exploited by an attacker to obtain sensitive information,...

7.7AI score
Exploits0References1
Rows per page
Query Builder