OP
Product
OpenSMTPD
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add OpenSMTPD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7247 In wildKEV | 9.8 | Jan 29 | OpenSMTPD Remote Code Execution Vulnerability Affected: 6.6 |
| CVE-2015-7687 | 9.8 | Oct 16 | Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving… Affected: through 5.7.1 |
| CVE-2013-2125 | – | May 27 | OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open Affected: through 5.3.1 |
Showing 3