vulnerability
Ubuntu: (Multiple Advisories) (CVE-2021-20314): Libspf2 vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Aug 12, 2021 | Jan 16, 2024 | Apr 16, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Aug 12, 2021
Added
Jan 16, 2024
Modified
Apr 16, 2026
Description
Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.
Solutions
ubuntu-pro-upgrade-libmail-spf-xs-perlubuntu-pro-upgrade-libspf2-2ubuntu-pro-upgrade-libspf2-devubuntu-pro-upgrade-spfqueryubuntu-upgrade-libmail-spf-xs-perlubuntu-upgrade-libspf2-2ubuntu-upgrade-libspf2-devubuntu-upgrade-spfquery
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.