Summary
It was discovered that OpenDMARC is prone to a signature-bypass vulnerability
with multiple "From:" addresses. An attacker could use it to bypass spam and
abuse filters.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | opendmarc | 1.3.2-3ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: …
References
-
report
https://ubuntu.com/security/CVE-2019-16378