Поиск уязвимостей
Количество 11
Количество 11
ALT-PU-2018-2811
ALT-PU-2018-2811: package `opendkim` update to version 2.11.0-alt1
CVE-2020-35766
The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation.
CVE-2020-35766
The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation.
CVE-2020-35766
The test suite in libopendkim in OpenDKIM through 2.10.3 allows local ...
CVE-2022-48521
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.
CVE-2022-48521
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.
CVE-2022-48521
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through ...
GHSA-q8qf-8pcx-vfw7
The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation.
GHSA-3q5m-9r3g-pqfj
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.
BDU:2024-06034
Уязвимость компонента Fake Authentication Result Handler программного обеспечения DKIM-фильтра OpenDKIM, позволяющая нарушителю оказывать влияние на целостность защищаемой информации
ROS-20240806-07
Уязвимость opendkim
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-2811 ALT-PU-2018-2811: package `opendkim` update to version 2.11.0-alt1 | CVSS3: 7.8 | почти 8 лет назад | |
 | CVE-2020-35766 The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation. | CVSS3: 7.8 | 1% Низкий | почти 6 лет назад |
 | CVE-2020-35766 The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation. | CVSS3: 7.8 | 1% Низкий | почти 6 лет назад |
| CVE-2020-35766 The test suite in libopendkim in OpenDKIM through 2.10.3 allows local ... | CVSS3: 7.8 | 1% Низкий | почти 6 лет назад |
| CVE-2022-48521 An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none. | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| CVE-2022-48521 An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none. | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| CVE-2022-48521 An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through ... | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| GHSA-q8qf-8pcx-vfw7 The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation. | 1% Низкий | больше 4 лет назад | |
| GHSA-3q5m-9r3g-pqfj An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none. | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
 | BDU:2024-06034 Уязвимость компонента Fake Authentication Result Handler программного обеспечения DKIM-фильтра OpenDKIM, позволяющая нарушителю оказывать влияние на целостность защищаемой информации | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
 | ROS-20240806-07 Уязвимость opendkim | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу