CVE search · CVE-2020-8794
CVE-2020-8794
critical 9.8
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-125
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | critical 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 2.0 | high 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- opensmtpd · opensmtpd
- canonical · ubuntu_linux
- fedoraproject · fedora
- debian · debian_linux
References
- http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.htmlExploitThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2020/Feb/32Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/26/1ExploitMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/03/01/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/03/01/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/7ExploitMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/
- https://usn.ubuntu.com/4294-1/PatchThird Party Advisory
- https://www.debian.org/security/2020/dsa-4634Third Party Advisory
- https://www.openbsd.org/security.htmlThird Party Advisory
- https://www.openwall.com/lists/oss-security/2020/02/24/5ExploitMailing ListThird Party Advisory
- http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.htmlExploitThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2020/Feb/32Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/26/1ExploitMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/03/01/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/03/01/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/7ExploitMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/
- https://usn.ubuntu.com/4294-1/PatchThird Party Advisory
- https://www.debian.org/security/2020/dsa-4634Third Party Advisory
- https://www.openbsd.org/security.htmlThird Party Advisory
- https://www.openwall.com/lists/oss-security/2020/02/24/5ExploitMailing ListThird Party Advisory