ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-opensmtpd | Mar 21, 2024 | Apr 4, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-opensmtpdamazon-linux-2023-upgrade-opensmtpd-debuginfoamazon-linux-2023-upgrade-opensmtpd-debugsource | Feb 17, 2025 | Apr 4, 2023 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Apr 4, 2023 | |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Apr 4, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub