Skip to content
OpenAdvisories

Package · Debian

python-aiosmtpd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-34083

    STARTTLS unencrypted commands injection

    aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could b…

    aio-libs aiosmtpd aiosmtpd python-aiosmtpd Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2024-27305

    SMTP smuggling in aiosmtpd

    aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP …

    aio-libs aiosmtpd python-aiosmtpd aiosmtpd Debian Ubuntu PyPI