https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T17:40:59.553821+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-12460 CVE-2020-12460 2026-10-14T17:40:59.555531+00:00

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte overwrites the heap metadata of the next chunk and its PREV_INUSE flag.

 https://cve.radiocsirt.org/vuln/usn-6356-1 USN-6356-1 — opendmarc vulnerabilities 2026-10-14T17:40:59.555578+00:00

Affected: Ubuntu:Pro:16.04:LTS: opendmarc, Ubuntu:18.04:LTS: opendmarc, Ubuntu:20.04:LTS: opendmarc

Jianjun Chen, Vern Paxson and Jian Jiang discovered that OpenDMARC incorrectly handled certain inputs. If a user or an automated system were tricked into receiving crafted inputs, an attacker could possibly use this to falsify the domain of an e-mails origin. (CVE-2020-12272)

Patrik Lantz discovered that OpenDMARC incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2020-12460)