https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:51:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06275 bdu:2023-06275 https://cve.radiocsirt.org/vuln/bdu:2023-06275 https://cve.radiocsirt.org/vuln/certfr-2023-ale-010 certfr-2023-ale-010 https://cve.radiocsirt.org/vuln/certfr-2023-ale-010 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0810 certfr-2023-avi-0810 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0810 https://cve.radiocsirt.org/vuln/euvd-2026-225937 EUVD-2026-225937 https://cve.radiocsirt.org/vuln/euvd-2026-225937 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42118 <p>Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.</p> <p>Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42118 https://cve.radiocsirt.org/vuln/ghsa-2vq7-8vvf-w66v <p>Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-17578.</p> <p>Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-17578.</p> https://cve.radiocsirt.org/vuln/ghsa-2vq7-8vvf-w66v https://cve.radiocsirt.org/vuln/gsd-2023-42118 gsd-2023-42118 https://cve.radiocsirt.org/vuln/gsd-2023-42118 https://cve.radiocsirt.org/vuln/oesa-2024-2584 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libspf2</p> <p>libspf2 is an implementation of the SPF (Sender Policy Framework) specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is coming from. This prevents email forgery, commonly used by spammers, scammers, and email viruses/worms. Security Fix(es): Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.(CVE-2023-42118)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libspf2</p> <p>libspf2 is an implementation of the SPF (Sender Policy Framework) specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is coming from. This prevents email forgery, commonly used by spammers, scammers, and email viruses/worms. Security Fix(es): Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.(CVE-2023-42118)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2584 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42118 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: libspf2, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: libspf2, Ubuntu:Pro:20.04:LTS: exim4, Ubuntu:20.04:LTS: libspf2, Ubuntu:22.04:LTS: exim4, Ubuntu:22.04:LTS: libspf2, Ubuntu:24.04:LTS: exim4 and 5 more</p> <p>Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: libspf2, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: libspf2, Ubuntu:Pro:20.04:LTS: exim4, Ubuntu:20.04:LTS: libspf2, Ubuntu:22.04:LTS: exim4, Ubuntu:22.04:LTS: libspf2, Ubuntu:24.04:LTS: exim4 and 5 more</p> <p>Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-42118 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2505 <p>Ein Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2505