Cybersecurity Alerts

OpenSMTPD Remote Code Execution Vulnerability

smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-755

CWE-78

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-7247