https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:04:07.439829+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06275 bdu:2023-06275 2026-10-04T20:04:07.620421+00:00 bdu:2023-06275 https://cve.radiocsirt.org/vuln/certfr-2023-ale-010 certfr-2023-ale-010 — Le 27 septembre 2023, Zero Day Initiative (ZDI) a publié six avis de sécurité \[1\] concernant des vulnérabilités de ty… 2026-10-04T20:04:07.620503+00:00 certfr-2023-ale-010 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0810 certfr-2023-avi-0810 — Une vulnérabilité a été découverte dans les produits Sophos. Elle permet à un attaquant de provoquer une exécution de c… 2026-10-04T20:04:07.620532+00:00 certfr-2023-avi-0810 https://cve.radiocsirt.org/vuln/euvd-2026-225937 EUVD-2026-225937 2026-10-04T20:04:07.620547+00:00 EUVD-2026-225937 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42118 fkie_cve-2023-42118 2026-10-04T20:04:07.620558+00:00

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.

 https://cve.radiocsirt.org/vuln/ghsa-2vq7-8vvf-w66v GHSA-2vq7-8vvf-w66v 2026-10-04T20:04:07.620591+00:00

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-17578.

 https://cve.radiocsirt.org/vuln/gsd-2023-42118 gsd-2023-42118 2026-10-04T20:04:07.620610+00:00 gsd-2023-42118 https://cve.radiocsirt.org/vuln/oesa-2024-2584 OESA-2024-2584 — libspf2 security update 2026-10-04T20:04:07.620620+00:00

Affected: openEuler:22.03-LTS-SP4: libspf2

libspf2 is an implementation of the SPF (Sender Policy Framework) specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is coming from. This prevents email forgery, commonly used by spammers, scammers, and email viruses/worms. Security Fix(es): Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.(CVE-2023-42118)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42118 UBUNTU-CVE-2023-42118 2026-10-04T20:04:07.620647+00:00

Affected: Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: libspf2, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: libspf2, Ubuntu:Pro:20.04:LTS: exim4, Ubuntu:20.04:LTS: libspf2, Ubuntu:22.04:LTS: exim4, Ubuntu:22.04:LTS: libspf2, Ubuntu:24.04:LTS: exim4 and 5 more

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2505 WID-SEC-W-2023-2505 — Exim: Mehrere Schwachstellen 2026-10-04T20:04:07.620689+00:00

Ein Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.