CVE-2020-35680 log
| Source |
|
| Severity | Low |
| Remote | Yes |
| Type | Denial of service |
| Description | smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between the SMTP engine and the filters layer. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1381 | opensmtpd | 6.7.1p1-6 | 6.8.0p2-1 | High | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 12 Jan 2021 | ASA-202101-18 | AVG-1381 | opensmtpd | High | multiple issues |
| References |
|---|
https://github.com/openbsd/src/commit/6c3220444ed06b5796dedfd53a0f4becd903c0d1 |