ID:5746 - Exploit for Out-of-bounds read in OpenSMTPD - CVE-2020-8794

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in mta_io() function in mta_session.c for multi-line replies during mail delivery. A remote attacker can use a mail server to send specially crafted replies, trigger out-of-bounds read error and read contents of memory on the system.

Remediation