Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6356-1
HistorySep 11, 2023 - 12:00 a.m.

OpenDMARC vulnerabilities

2023-09-1100:00:00
ubuntu.com
40
opendmarc
ubuntu
vulnerability
input handling
domain falsification
denial of service

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.011

Percentile

84.5%

JSON

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • opendmarc - Open Source implementation of the DMARC specification

Details

Jianjun Chen, Vern Paxson and Jian Jiang discovered that OpenDMARC
incorrectly handled certain inputs. If a user or an automated system were
tricked into receiving crafted inputs, an attacker could possibly use this
to falsify the domain of an e-mails origin. (CVE-2020-12272)

Patrik Lantz discovered that OpenDMARC incorrectly handled certain inputs.
If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to
cause a denial of service. (CVE-2020-12460)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchlibopendmarc2< 1.3.2-7ubuntu0.1UNKNOWN
Ubuntu20.04noarchlibopendmarc-dev< 1.3.2-7ubuntu0.1UNKNOWN
Ubuntu20.04noarchlibopendmarc2-dbgsym< 1.3.2-7ubuntu0.1UNKNOWN
Ubuntu20.04noarchopendmarc< 1.3.2-7ubuntu0.1UNKNOWN
Ubuntu20.04noarchopendmarc-dbgsym< 1.3.2-7ubuntu0.1UNKNOWN
Ubuntu18.04noarchlibopendmarc2< 1.3.2-3ubuntu0.2UNKNOWN
Ubuntu18.04noarchlibopendmarc-dev< 1.3.2-3ubuntu0.2UNKNOWN
Ubuntu18.04noarchlibopendmarc2-dbgsym< 1.3.2-3ubuntu0.2UNKNOWN
Ubuntu18.04noarchopendmarc< 1.3.2-3ubuntu0.2UNKNOWN
Ubuntu18.04noarchopendmarc-dbgsym< 1.3.2-3ubuntu0.2UNKNOWN
Rows per page:
1-10 of 191

Related

osv 5
nessus 5
openvas 7
fedora 3
mageia 1
freebsd 1
debian 2
debiancve 2
prion 2
cvelist 2
gentoo 1
veracode 2
ubuntucve 2
cve 2
nvd 2
archlinux 2
kitploit 1
osv
osv
opendmarc vulnerabilities
2023-09-11 12:47:12
CVE-2020-12272
2020-04-27 14:15:11
opendmarc - security update
2023-08-28 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : OpenDMARC vulnerabilities (USN-6356-1)
2023-09-11 00:00:00
FreeBSD : OpenDMARC - Multiple vulnerabilities (937aa1d6-685e-11ec-a636-000c29061ce6)
2023-11-06 00:00:00
Debian DLA-3546-1 : opendmarc - LTS security update
2023-08-28 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6356-1)
2023-09-11 00:00:00
Mageia: Security Advisory (MGASA-2021-0462)
2022-01-28 00:00:00
Fedora: Security Advisory for opendmarc (FEDORA-2021-1ec3c5ed63)
2021-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: opendmarc-1.4.1-1.fc34
2021-05-31 01:05:38
[SECURITY] Fedora 33 Update: opendmarc-1.4.1-1.fc33
2021-05-31 00:47:53
[SECURITY] Fedora 34 Update: opendmarc-1.4.0-1.fc34
2021-05-08 01:34:34
mageia
mageia
Updated opendmarc packages fix security vulnerability
2021-10-06 22:41:56
freebsd
freebsd
OpenDMARC - Multiple vulnerabilities
2021-04-06 00:00:00
debian
debian
[SECURITY] [DLA 3546-1] opendmarc security update
2023-08-28 18:08:55
[SECURITY] [DLA 2639-1] opendmarc security update
2021-04-25 07:50:20
debiancve
debiancve
CVE-2020-12272
2020-04-27 14:15:11
CVE-2020-12460
2020-07-27 23:15:12
prion
prion
Authentication flaw
2020-04-27 14:15:00
Design/Logic Flaw
2020-07-27 23:15:00
cvelist
cvelist
CVE-2020-12272
2020-04-27 00:00:00
CVE-2020-12460
2020-07-27 22:52:35
gentoo
gentoo
OpenDMARC: Heap-based buffer overflow
2020-11-03 00:00:00
veracode
veracode
Denial Of Service(DoS)
2021-04-27 06:25:05
Privilege Escalation
2021-06-01 10:46:55
ubuntucve
ubuntucve
CVE-2020-12460
2020-07-27 00:00:00
CVE-2020-12272
2020-04-27 00:00:00
cve
cve
CVE-2020-12460
2020-07-27 23:15:12
CVE-2020-12272
2020-04-27 14:15:11
nvd
nvd
CVE-2020-12272
2020-04-27 14:15:11
CVE-2020-12460
2020-07-27 23:15:12
archlinux
archlinux
[ASA-202009-1] opendmarc: denial of service
2020-09-01 00:00:00
[ASA-202105-13] opendmarc: multiple issues
2021-05-19 00:00:00
kitploit
kitploit
Espoofer - An Email Spoofing Testing Tool That Aims To Bypass SPF/DKIM/DMARC And Forge DKIM Signatures
2022-01-14 20:30:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.011

Percentile

84.5%

JSON
Related for USN-6356-1
osv5nessus5openvas7fedora3mageia1freebsd1debian2debiancve2prion2cvelist2gentoo1veracode2ubuntucve2cve2nvd2archlinux2kitploit1