| Package | Affected versions | Patched versions |
|---|---|---|
| libspf2 | = 1.0.2= 1.0.3= 1.0.4= 1.2.1= 1.2.3= 1.2.4= 1.2.5= 1.2.6≤ 1.2.7 |
Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free