2022-05-30
ALT-BU-2022-5092-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2021-06-17
BDU:2021-04876
Уязвимость реализации аутентификации OpenDMARC, связанная с ошибками разыменования указателя, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2021-06-10
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2021-34555
OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- https://github.com/trusteddomainproject/OpenDMARC/issues/179
- https://github.com/trusteddomainproject/OpenDMARC/issues/179
- https://github.com/trusteddomainproject/OpenDMARC/pull/178
- https://github.com/trusteddomainproject/OpenDMARC/pull/178
- FEDORA-2021-0c98725795
- FEDORA-2021-0c98725795
- FEDORA-2021-889af802f2
- FEDORA-2021-889af802f2