CVE-2023-29323

概要

参考情報

• cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff · Product
• cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff · Product
• cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff · Product
• ftp.openbsd.org/pub/OpenBSD/patches/7.1/common/024_smtpd.patch.sig · Patch
• ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/020_smtpd.patch.sig · Patch
• OpenSMTPD/OpenSMTPD commit 41d0eae · Patch
• openbsd/src commit f748277 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZBNQBHCM6PIOUR6I5GEQS35XYT2NX6T
• security.netapp.com/advisory/ntap-20230526-0006
• lists.fedoraproject.org/archives/list/[email protected]/message/GZBNQBHCM6PIOUR6I5GEQS35XYT2NX6T

opensmtpd のその他の脆弱性

• CVE-2025-62875中 5.5An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue aff…
• CVE-2020-35680高 7.5smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointe…
• CVE-2020-35679高 7.5smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak v…
• CVE-2020-8794緊急 9.8OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Alth…
• CVE-2020-8793中 4.7OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrust…