trusteddomain opendmarc vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

OpenDMARC up to and including 1.3.2 and 1.4.x up to and including 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause rem...

Trusteddomain Opendmarc 1.4.0 Trusteddomain Opendmarc Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0

9.8

CVSSv3

OpenDMARC up to and including 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field.

Trusteddomain Opendmarc Trusteddomain Opendmarc 1.4.0 Pypolicyd-spf Project Pypolicyd-spf 2.0.2 Fedoraproject Fedora 33 Fedoraproject Fedora 34

6 Github repositories

9.8

CVSSv3

OpenDMARC up to and including 1.3.2 and 1.4.x up to and including 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message.

Trusteddomain Opendmarc 1.4.0 Trusteddomain Opendmarc Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Canonical Ubuntu Linux 18.04

7.5

CVSSv3

OpenDMARC 1.4.1 and 1.4.1.1 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.

Trusteddomain Opendmarc 1.4.1.1 Trusteddomain Opendmarc 1.4.1 Fedoraproject Fedora 33 Fedoraproject Fedora 34

5.3

CVSSv3

OpenDMARC up to and including 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstra...

Trusteddomain Opendmarc 1.4.0 Trusteddomain Opendmarc Fedoraproject Fedora 33 Fedoraproject Fedora 34

6 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook