CVE-2020-8794

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-8794
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2020/Feb/32 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/26/1 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/03/01/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/03/01/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/04/7 Exploit Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/
https://usn.ubuntu.com/4294-1/ Patch Third Party Advisory
https://www.debian.org/security/2020/dsa-4634 Third Party Advisory
https://www.openbsd.org/security.html Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/02/24/5 Exploit Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:opensmtpd:opensmtpd:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

07 Nov 2023, 03:26

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/', 'name': 'FEDORA-2020-b92d7083ca', 'tags': ['Mailing List', 'Patch', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/ -

08 Oct 2022, 02:48

Type Values Removed Values Added
CPE cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
First Time Fedoraproject fedora
Canonical ubuntu Linux
Canonical
Fedoraproject
Debian debian Linux
Debian
References (DEBIAN) https://www.debian.org/security/2020/dsa-4634 - (DEBIAN) https://www.debian.org/security/2020/dsa-4634 - Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2020/03/01/2 - (MLIST) http://www.openwall.com/lists/oss-security/2020/03/01/2 - Mailing List, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2021/05/04/7 - (MLIST) http://www.openwall.com/lists/oss-security/2021/05/04/7 - Exploit, Mailing List, Third Party Advisory
References (MISC) http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.html - (MISC) http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References (UBUNTU) https://usn.ubuntu.com/4294-1/ - (UBUNTU) https://usn.ubuntu.com/4294-1/ - Patch, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2020/03/01/1 - (MLIST) http://www.openwall.com/lists/oss-security/2020/03/01/1 - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/ - Mailing List, Patch, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2020/02/26/1 - (MLIST) http://www.openwall.com/lists/oss-security/2020/02/26/1 - Exploit, Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2020/Feb/32 - (FULLDISC) http://seclists.org/fulldisclosure/2020/Feb/32 - Mailing List, Third Party Advisory

04 May 2021, 18:15

Type Values Removed Values Added
References
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/05/04/7 -
Information

Published : 2020-02-25 17:15

Updated : 2023-12-10 13:13

NVD link : CVE-2020-8794

Mitre link : CVE-2020-8794

CVE.ORG link : CVE-2020-8794

JSON object : View

Products Affected

debian

  • debian_linux

canonical

  • ubuntu_linux

opensmtpd

  • opensmtpd

fedoraproject

  • fedora
CWE
CWE-125

Out-of-bounds Read