| Package | Affected versions | Patched versions |
|---|---|---|
| opensmtpd | = 6.8.0< 6.8.0 | 6.8.0 |
smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between the SMTP engine and the filters layer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free