Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2023-22486 CVE-2023-42118 · GHSA-2vq7-8vvf-w66v

Integer underflow in Exim libspf2

Priority MEDIUM 51

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.08351 Published 2024-05-03 No fix listed CWE-191
Priority MEDIUM 54

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a crafted SPF DNS record, beca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09643 Published 2022-01-19 No fix listed CWE-787
Priority MEDIUM 54

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a crafted SPF DNS re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09643 Published 2022-01-19 No fix listed CWE-787