Search for packages
| purl | pkg:deb/debian/sendmail@8.17.1.9-2 |
| Tags | Ghost |
| Next non-vulnerable version | 8.17.1.9-2+deb12u2 |
| Latest non-vulnerable version | 8.17.1.9-2+deb12u2 |
| Risk | 2.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ptnv-fwch-aaag
Aliases: CVE-2023-51765 |
sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other popular e-mail servers do not. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-05-20T15:10:06.593389+00:00 | Debian Importer | Affected by | VCID-ptnv-fwch-aaag | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-25T01:48:26.678373+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-25T01:48:24.840197+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | None | 34.0.0rc4 |
| 2024-01-11T02:46:56.285083+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc2 |
| 2024-01-11T02:46:39.055834+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | None | 34.0.0rc2 |
| 2024-01-04T15:02:39.541055+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc1 |
| 2024-01-04T15:02:30.512002+00:00 | Debian Importer | Fixing | VCID-naz4-k1th-aaad | None | 34.0.0rc1 |