CVE-2020-35679

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an…

published December 24, 2020

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02792 · 86.3th percentile
Published
2020-12-24T15:53Z
EPSS history
Timeline
  • 24 DEC 15:53Z
    smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an…
    cvelistv5