CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

UBUNTU-CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

Design/Logic Flaw

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

CVE-2015-7687

CVE-2015-7687 affects OpenSMTPD before 5.7.2, with a use-after-free in verification paths (req_ca_vrfy_smtp and req_ca_vrfy_mta). Remote attackers can cause denial of service or execute arbitrary code. Remediation: upgrade to OpenSMTPD 5.7.2 or later (per vendor release notes).

CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

Fedora 23 : opensmtpd-5.7.3p1-1.fc23 (2015-ed1c673f09)

"Issues fixed in this release since 5.7.2: - fix an mda buffer truncation bug which allows a user to create forward files that pass session checks but fail delivery later down the chain, within the user mda; - fix remote buffer overflow in unprivileged pony process; - reworked offline enqueue to...

Fedora 22 : opensmtpd-5.7.3p1-1.fc22 (2015-fd133d52cc)

"Issues fixed in this release since 5.7.2: - fix an mda buffer truncation bug which allows a user to create forward files that pass session checks but fail delivery later down the chain, within the user mda; - fix remote buffer overflow in unprivileged pony process; - reworked offline enqueue to...

OpenSMTPD: Multiple vulnerabilities

Background OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD. Description Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges o...

GLSA-201601-04 : OpenSMTPD: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201601-04 OpenSMTPD: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary...

[SECURITY] Fedora 23 Update: opensmtpd-5.7.3p1-1.fc23

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...

OpenSMTPD 'filter.c' Stack Buffer Overflow Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request to crash an application or execute arbitrary code...

OpenSMTPD Information Disclosure Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests to obtain sensitive information...

OpenSMTPD has multiple vulnerabilities

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from stack overflow, memory corruption, and symbolic link attack vulnerabilities that could be exploited by remote attackers to submit a special request for a denial-of-service attack, crash an application, or...

OpenSMTPD Memory Corruption Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol. OpenSMTPD suffers from a memory corruption vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for denial of service attacks...

OpenSMTPD after the release of the heavy interest with vulnerability-vulnerability warning-the black bar safety net

Affected system: opensmtpd opensmtpd Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-7 6 8 7 OpenSMTPD is an RFC 5 3 2 1 definition of server-side SMTP Protocol is free to implement. OpenSMTPD in PROCLKA achieve on there after...

OpenSMTPD Memory Misreference Vulnerability

OpenSMTPD is a free implementation of the server-side SMTP protocol defined in RFC 5321. OpenSMTPD suffers from a memory misreference vulnerability in the PROCLKA implementation. A remote attacker could exploit this vulnerability to remotely execute arbitrary code...

[SECURITY] Fedora 22 Update: opensmtpd-5.7.3p1-1.fc22

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...