CVE-2020-35679

OpenSMTPD has two CVEs associated with older releases prior to 6.8.0p1: CVE-2020-35679: In smtpd/table.c, a regfree issue can allow an attacker to trigger a very significant memory leak by sending messages to an instance performing many regex lookups. CVE-2020-35680: In certain configurations, sm...

CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CVE-2020-35680

OpenSMTPD CVE-2020-35680 affects smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, where the filter state machine does not properly maintain the I/O channel between the SMTP engine and the filters layer, enabling remote attackers to cause a denial of service via crafted client activity (NULL pointe...

CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CVE-2020-35679: Missing Release of Memory after Effective Lifetime

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

Openbsd Opensmtpd Security Vulnerability

Openbsd Opensmtpd is an RFC 5321-based SMTP server software from the Openbsd organization. A security vulnerability exists in OpenSMTPD versions prior to 6.8.0p1, which stems from the lack of a specific regfree in smtpd/table.c, and can be exploited by an attacker to trigger a "very severe" memor...

CVE-2020-35680: NULL Pointer Dereference

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

PT-2020-17390 · Openbsd · Opensmtpd

Name of the Vulnerable Software and Affected Versions: OpenSMTPD versions prior to 6.8.0p1 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a crafted pattern of client activity. This occurs because the filter state machine does not...

The vulnerability in the implementation of the mta_io function (mta_session.c) of the mail daemon OpenSMTPD allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the mtaio function mtasession.c in the mail daemon OpenSMTPD is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Recommended update for mailman (moderate)

openSUSE Security Update: Recommended update for mailman Announcement ID: openSUSE-SU-2020:1707-1 Rating: moderate References: 1171363 1173369 Cross-References: CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...

Remote Code Execution (RCE)

opensmtpd:bionic is vulnerable to denial of service DoS. smtpmailaddr in smtpsession.c allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The...

Remote Code Execution

OpenSMTPD is vulnerable to remote code execution. An out-of-bounds read in mtaio in mtasession.c for multi-line replies allows an attacker to execute arbitrary code on the server during bounce handling...

Information Disclosure

OpenSMTPD is vulnerable to information disclosure. An untrusted search path in makemap.c and race conditions in the offline functionality in smptd.c allows local users to read arbitrary files on the system...

OpenSMTPD Remote Code Execution (CVE-2020-7247)

A remote code execution vulnerability exists in OpenSMTPD. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Fedora: Security Advisory for opensmtpd (FEDORA-2020-b92d7083ca)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: opensmtpd-6.6.4p1-2.fc32

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...

OpenSMTPD Remote Code Execution (CVE-2020-8794)

A remote code execution vulnerability exists in OpenSMTPD. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OpenSMTPD - OOB Read Local Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenSMTPD OOB Read Local Privilege Escalation', 'Description' = %q This module exploits an out-of-bounds read of an attacker-controlled string in...