CVE-2021-20314

—

CVSS 3.1

9.8 critical

EPSS

3%p86

Published

Aug 12, 2021 (Aug 12, 2021)

Modified

Jun 17, 2026

Description

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.

Vendors: libspf2 redhat fedoraproject
Products: libspf2, enterprise linux, fedora
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news0 stories

No ingested article mentions this CVE yet.