Description
Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | opensmtpd | 5.7.3p1-1 | — |
| Debian 13 | opensmtpd | 5.7.3p1-1 | — |
| Debian 12 | opensmtpd | 5.7.3p1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | opensmtpd | No fix yet | — |
References
- [oss-security] 20151003 Re: Qualys Security Advisory - OpenSMTPD Audit Report mailing-list
- FEDORA-2015-ed1c673f09 vendor-advisory
- https://www.opensmtpd.org/announces/release-5.7.2.txt
- 76975 vdb-entry
- https://www.qualys.com/2015/10/02/opensmtpd-audit-report.txt
- FEDORA-2015-fd133d52cc vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1268793