OP
Product
Opendmarc
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Opendmarc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-12460 | 9.8 | Jul 27 | OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in… Affected: through 1.3.2; 1.4.0; 1.4.0 |
| CVE-2019-20790 | 9.8 | Apr 27 | OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent… Affected: 1.3.0 through 1.3.2; 1.4.0 |
| CVE-2019-16378 | 9.8 | Sep 17 | OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a… Affected: through 1.3.2; 1.4.0; 1.4.0 |
| CVE-2024-25768 | 7.5 | Feb 26 | OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c Affected: 1.4.2 |
| CVE-2021-34555 | 7.5 | Jun 10 | OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field Affected: 1.4.1; 1.4.1.1 |
| CVE-2020-12272 | 5.3 | Apr 27 | OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message Affected: 1.0.0 through 1.3.2; 1.4.0; 1.4.0; 1.4.0 |
Showing 6