| Package | Affected versions | Patched versions |
|---|---|---|
| sendmail | = 8.12.5-7= 8.12.8-4 | |
| sendmail | = 8.12.1= 8.12.2= 8.12.3= 8.12.4= 8.12.5= 8.12.6= 8.12.7= 8.12.8 |
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free