Alpine/libspf2: critical 9.8
Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.
Action: Upgrade libspf2 to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.10-r5 | - |
Fixed versions
| 1.2.10-r5 | 1.2.11-r4 |
Sources
- osv: ALPINE-CVE-2021-20314#Alpine:v3.24/libspf2
- https://security.alpinelinux.org/vuln/CVE-2021-20314
published · modified · JSON