vulnerability

Ubuntu: (Multiple Advisories) (CVE-2020-8793): OpenSMTPD vulnerabilities

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:C/I:N/A:N)
Published
Feb 24, 2020
Added
Mar 3, 2020
Modified
Nov 15, 2024

Description

OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.

Solution

ubuntu-pro-upgrade-opensmtpd
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.