Описание
chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| chasquid | fixed | 1.13-1 | package | |
| chasquid | no-dsa | bookworm | package | |
| chasquid | no-dsa | bullseye | package | |
| chasquid | postponed | buster | package |
Примечания
https://blitiri.com.ar/p/chasquid/relnotes/#113-2023-12-24
EPSS
Процентиль: 36%
0.0015
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 2 лет назад
chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.
CVSS3: 7.5
nvd
около 2 лет назад
chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.
CVSS3: 7.5
github
около 2 лет назад
chasquid HTTP Request/Response Smuggling vulnerability
EPSS
Процентиль: 36%
0.0015
Низкий