ALPINE-CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

Memory corruption

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

Null pointer dereference

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

CVE-2020-35679

OpenSMTPD has two CVEs associated with older releases prior to 6.8.0p1: CVE-2020-35679: In smtpd/table.c, a regfree issue can allow an attacker to trigger a very significant memory leak by sending messages to an instance performing many regex lookups. CVE-2020-35680: In certain configurations, sm...

CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups...

CVE-2020-35680

OpenSMTPD CVE-2020-35680 affects smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, where the filter state machine does not properly maintain the I/O channel between the SMTP engine and the filters layer, enabling remote attackers to cause a denial of service via crafted client activity (NULL pointe...

CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

Openbsd Opensmtpd Security Vulnerability

Openbsd Opensmtpd is an RFC 5321-based SMTP server software from the Openbsd organization. A security vulnerability exists in OpenSMTPD versions prior to 6.8.0p1, which stems from the lack of a specific regfree in smtpd/table.c, and can be exploited by an attacker to trigger a "very severe" memor...

PT-2020-17390 · Openbsd · Opensmtpd

Name of the Vulnerable Software and Affected Versions: OpenSMTPD versions prior to 6.8.0p1 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a crafted pattern of client activity. This occurs because the filter state machine does not...

The vulnerability in the implementation of the mta_io function (mta_session.c) of the mail daemon OpenSMTPD allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the mtaio function mtasession.c in the mail daemon OpenSMTPD is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Recommended update for mailman (moderate)

openSUSE Security Update: Recommended update for mailman Announcement ID: openSUSE-SU-2020:1707-1 Rating: moderate References: 1171363 1173369 Cross-References: CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...

Remote Code Execution (RCE)

opensmtpd:bionic is vulnerable to denial of service DoS. smtpmailaddr in smtpsession.c allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The...

Remote Code Execution

OpenSMTPD is vulnerable to remote code execution. An out-of-bounds read in mtaio in mtasession.c for multi-line replies allows an attacker to execute arbitrary code on the server during bounce handling...