CVE-2021-20314

CRITIQUE 9.8CVE-2021-20314 · Published 12/08/2021 · updated 17/06/2026

En bref

CVE-2021-20314 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant libspf2 (libspf2).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.8%, plus élevée que 86.7% des vulnérabilités.
Correctif : mettre à jour vers 1.2.11 ou plus récent.

Package	Affected versions	Patched versions
libspf2 libspf2	`< 1.2.11`	`1.2.11`

Description

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.

References

bugzilla.redhat.com/show_bug.cgi · Issue Tracking
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMSFT2NJDZ7PATRZSQPAOGSE7JD6ELOB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJRHPE5OSCPTNA3ZZ4ORDHT4JQH3Y4
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6T4HYXXSUQCGJB2ES6X7Q74YYF7V7XU
security.gentoo.org/glsa/202401-22

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free