[ GLSA 202105-12 ] OpenSMTPD

[GLSA]

Gentoo Linux Security Advisory

Title: OpenSMTPD: Multiple vulnerabilities (GLSA 202105-12)
Severity: low
Exploitable: local, remote
Date: 2021-05-26
Bug(s): #761945
ID: 202105-12

Synopsis

Multiple vulnerabilities have been found in OpenSMTPD, the worst of
which could result in a Denial of Service condition.


Background

OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD.

Affected Packages

Package: mail-mta/opensmtpd
Vulnerable: < 6.8.0_p2
Unaffected: >= 6.8.0_p2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in OpenSMTPD. Please
review the CVE identifiers referenced below for details.


Impact

A remote attacker, by connecting to the SMTP listener daemon, could
possibly cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All OpenSMTPD users should upgrade to the latest version: