Known vulnerabilities in opensmtpd (Debian package) 6.0.2p1-2+deb9u1
Vendor:
Debian
Software:
opensmtpd (Debian package)
Version:
6.0.2p1-2+deb9u1
Software CPE:
cpe:2.3:o:debian:opensmtpd_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
2
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
6.8.0p1~rc1
6.8.0p1~rc1-1
6.7.1p1
6.7.1p1-2
6.6.4p1-2~bpo10+1
6.6.4p1
6.0.3p1
6.0.2p1
6.0.2p1-2+deb9u3
6.0.3p1-5+deb10u4
6.0.3p1-5+deb10u2
6.6.4p1-1~bpo10+1
6.6.4p1-1
6.0.2p1-2+deb9u1
6.0.2p1-2+deb9u2
6.0.3p1-5+deb10u3
6.6.2p1-1~bpo10+1
6.6.1p1-5~bpo10+1
6.6.2p1-1
6.0.3p1-5+deb10u1
6.6.1p1-4~bpo10+1
6.6.1p1-5
6.6.1p1-4
6.6.1p1-2
6.6.1p1-3
6.6.1p1-1
6.0.3p1-6
6.4.2p1-1
6.0.3p1-5
6.0.3p1-4
6.0.3p1-3
6.0.3p1-2
6.0.3p1-1
6.0.2p1-3
5.9.2p1-1
6.0.2p1-1
6.0.2p1-2
5.3.3p1-1
5.3.3p1-2
5.3.3p1-3
5.3.3p1-4
5.4.1p1-1
5.4.2p1-1
5.4.2p1-2
5.4.2p1-3
5.4.2p1-4
5.7.3p1-1
5.7.3p2-1
5.7.3p2-1~bpo8+1
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU25625 - Out-of-bounds read CVE-2020-8794 |
CWE-125 | Medium | 6.0.2p1-2+deb9u3, 6.0.3p1-5+deb10u4 | 26.02.2020 |
SB2020022510 SB2020022801 SB2020022901 and 7 more |
||
| #VU24745 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-7247 |
CWE-78 | Critical | 6.0.2p1-2+deb9u2, 6.0.3p1-5+deb10u3 | 29.01.2020 |
SB2020012920 SB2020012921 SB2020013013 and 4 more |