trusteddomain Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/trusteddomain/ Sun, 26 Feb 2023 06:36:35 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png trusteddomain Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/trusteddomain/ 32 32 CVE-2020-12460 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12460/ Sun, 26 Feb 2023 06:36:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12460/ OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a ” byte overwrites the heap metadata of the next chunk and its PREV_INUSE flag.

The post CVE-2020-12460 appeared first on CVE Vulnerability.

]]> OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a ” byte overwrites the heap metadata of the next chunk and its PREV_INUSE flag.

The post CVE-2020-12460 appeared first on CVE Vulnerability.

]]> CVE-2020-12272 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12272/ Sun, 26 Feb 2023 06:36:31 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12272/ OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com substring.

The post CVE-2020-12272 appeared first on CVE Vulnerability.

]]> OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com substring.

The post CVE-2020-12272 appeared first on CVE Vulnerability.

]]> CVE-2021-34555 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34555/ Thu, 23 Feb 2023 14:10:16 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34555/ OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.

The post CVE-2021-34555 appeared first on CVE Vulnerability.

]]> OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.

The post CVE-2021-34555 appeared first on CVE Vulnerability.

]]>