CVE-2020-8794

概要

参考情報

• packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.html · Exploit
• seclists.org/fulldisclosure/2020/Feb/32 · Mailing List
• openwall.com/lists/oss-security/2020/02/26/1 · Exploit
• openwall.com/lists/oss-security/2020/03/01/1 · Mailing List
• openwall.com/lists/oss-security/2020/03/01/2 · Mailing List
• openwall.com/lists/oss-security/2021/05/04/7 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E
• usn.ubuntu.com/4294-1 · Patch
• debian.org/security/2020/dsa-4634 · Third Party Advisory
• openbsd.org/security.html · Third Party Advisory
• openwall.com/lists/oss-security/2020/02/24/5

opensmtpd のその他の脆弱性

• CVE-2025-62875中 5.5An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue aff…
• CVE-2023-29323高 7.8ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit…
• CVE-2020-35680高 7.5smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointe…
• CVE-2020-35679高 7.5smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak v…
• CVE-2020-8793中 4.7OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrust…