Opendmarc Security Vulnerabilities and Issues — Opendmarc CVE List

Lucene search

TrusteddomainOpendmarc

3 matches found

CVE•added 2020/07/27 11:15 p.m.•67 views

CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte over...

9.8CVSS9.6AI score0.24331EPSS

CVE•added 2019/09/17 12:15 p.m.•64 views

CVE-2019-16378

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message.

9.8CVSS9.2AI score0.00509EPSS

CVE•added 2020/04/27 2:15 p.m.•58 views

CVE-2019-20790

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field.

9.8CVSS9.4AI score0.00226EPSS