Read the docs

Libspf2 Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Libspf2 Project records in CISA KEV

No Libspf2 Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libspf2 3 records MEDIUM

Records

3 records

TI-2021-13222 CVE-2021-33913 · GHSA-7659-433m-4fhx

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers…

Priority MEDIUM 54

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a crafted SPF DNS record, beca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09643 Published 2022-01-19 No fix listed CWE-787
TI-2021-13221 CVE-2021-33912 · GHSA-f8wp-q2v8-9hc2

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote…

Priority MEDIUM 54

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a crafted SPF DNS re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09643 Published 2022-01-19 No fix listed CWE-787
TI-2023-22486 CVE-2023-42118 · GHSA-2vq7-8vvf-w66v

Integer underflow in Exim libspf2

Priority MEDIUM 51

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.08351 Published 2024-05-03 No fix listed CWE-191
Open these records in search →