CVE-2020-35680 in OpenSMTPDinfo

Summary

by MITRE • 12/25/2020

smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between the SMTP engine and the filters layer.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Disclosure

12/25/2020

Moderation

accepted

CPE

ready

EPSS

0.03578

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-35680
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-35680
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-35680/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!