vulnerability
Ubuntu: USN-6356-1 (CVE-2020-12272): OpenDMARC vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Apr 27, 2020 | Sep 18, 2023 | Nov 15, 2024 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Apr 27, 2020
Added
Sep 18, 2023
Modified
Nov 15, 2024
Description
OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com substring.
Solution(s)
ubuntu-pro-upgrade-libopendmarc2ubuntu-pro-upgrade-opendmarc
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.