CVE-2020-8794
OpenSMTPD before 6.6.4 allows remote code execution because of an out- ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (élevée).
Description
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.13 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.14 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.15 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.16 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.17 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.18 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.19 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.20 | opensmtpd-extras | 6.6.4-r0 |
| debian 10 | opensmtpd | 6.0.3p1-5+deb10u4 |
| debian 11 | opensmtpd | 6.6.4p1-1 |
| debian 12 | opensmtpd | 6.6.4p1-1 |
| debian 13 | opensmtpd | 6.6.4p1-1 |
Afficher les 33 entrées de 33 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.13 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.14 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.15 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.16 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.17 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.18 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.19 | opensmtpd-extras | 6.6.4-r0 |
| alpine 3.20 | opensmtpd-extras | 6.6.4-r0 |
| debian 10 | opensmtpd | 6.0.3p1-5+deb10u4 |
| debian 11 | opensmtpd | 6.6.4p1-1 |
| debian 12 | opensmtpd | 6.6.4p1-1 |
| debian 13 | opensmtpd | 6.6.4p1-1 |
| debian 14 | opensmtpd | 6.6.4p1-1 |
| debian 9 | opensmtpd | 6.0.2p1-2+deb9u3 |
| echo | opensmtpd | 6.6.4p1-1 |
| ubuntu 16.04-ESM | opensmtpd | 5.7.3p2-1ubuntu0.1~esm2 |
| ubuntu 18.04 | opensmtpd | 6.0.3p1-1ubuntu0.2 |
| ubuntu 18.04-ESM | opensmtpd | 6.0.3p1-1ubuntu0.2 |
| ubuntu 19.10 | opensmtpd | 6.0.3p1-6ubuntu0.2 |
| ubuntu 20.04 | opensmtpd | 6.6.4p1-1 |
| ubuntu 20.04-ESM | opensmtpd | 6.6.4p1-1 |
| ubuntu 20.10 | opensmtpd | 6.6.4p1-1 |
| ubuntu 21.04 | opensmtpd | 6.6.4p1-1 |
| ubuntu 21.10 | opensmtpd | 6.6.4p1-1 |
| ubuntu 22.04 | opensmtpd | 6.6.4p1-1 |
| ubuntu 22.10 | opensmtpd | 6.6.4p1-1 |
| ubuntu 23.04 | opensmtpd | 6.6.4p1-1 |
| ubuntu 23.10 | opensmtpd | 6.6.4p1-1 |
| ubuntu 24.04 | opensmtpd | 6.6.4p1-1 |
| ubuntu 24.10 | opensmtpd | 6.6.4p1-1 |
| ubuntu 25.04 | opensmtpd | 6.6.4p1-1 |
| ubuntu 25.10 | opensmtpd | 6.6.4p1-1 |
| ubuntu 26.04 | opensmtpd | 6.6.4p1-1 |
Références
- http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2020/Feb/32
- http://www.openwall.com/lists/oss-security/2020/02/26/1
- http://www.openwall.com/lists/oss-security/2020/03/01/1
- http://www.openwall.com/lists/oss-security/2020/03/01/2
- http://www.openwall.com/lists/oss-security/2021/05/04/7
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/
- https://ubuntu.com/security/notices/USN-4294-1