Vulnerabilitycritical

Experts discovered a new critical OpenSMTPD RCE flaw

Security Affairsby @securityaffairsFeb 25, 2020 · 15:26 UTC (Feb 25, 2020)2 min read3

Read at securityaffairs.com

Analyze CVE-2020-8794 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-8794 CVE-2020-7247

Tags: cve-2020-8794 cve-2020-7247 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-7247	Unauthenticated Root RCE in OpenSMTPD 6.6 (OpenBSD and Linux)	9.8	99%	KEVPoC ×6	Jan 29, 2020 KEV Mar 25, 2022
CVE-2020-8794	OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies	9.8	89%	PoC ×4	Feb 25, 2020

From the original article

2 min read at securityaffairs.com

Experts discovered a new critical remote code execution vulnerability in the OpenSMTPD that could allow hacking email servers running BSD or Linux. A new critical remote code execution vulnerability was discovered in the OpenSMTPD that could be exploited by attackers to take complete control over email servers running BSD or Linux operating systems.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.