Vulnerabilities

TI-2020-05854 CVE-2020-7247 · GHSA-rcw6-69h3-89fh

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other…

CRITICAL 100KEV

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98972 Published 2020-01-29 No fix listed CWE-755

TI-2015-06389 CVE-2015-7687 · GHSA-hmqq-mf9r-frq9

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a…

MEDIUM 49

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04076 Published 2017-10-16 No fix listed CWE-416

TI-2013-01894 CVE-2013-2125 · GHSA-63q3-5f3r-v5j4

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote…

LOW 28

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02474 Published 2014-05-27 No fix listed CWE-310

Vulnerabilities

Filters

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other…

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a…

OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote…