CVE-2020-35680

smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and…

published December 24, 2020

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between the SMTP engine and the filters layer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03652 · 89.6th percentile
Published
2020-12-24T15:53Z
EPSS history
Timeline
  • 24 DEC 15:53Z
    smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and…
    cvelistv5