OpenSMTPD < 5.7.2 Use-after-free Vulnerability

OpenSMTPD is prone to a use-after-free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:opensmtpd";...

Linux Distros Unpatched Vulnerability : CVE-2015-7687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involvin...

CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

CVE-2015-7687

CVE-2015-7687 affects OpenSMTPD before 5.7.2, with a use-after-free in verification paths (req_ca_vrfy_smtp and req_ca_vrfy_mta). Remote attackers can cause denial of service or execute arbitrary code. Remediation: upgrade to OpenSMTPD 5.7.2 or later (per vendor release notes).