NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2020-7247

OpenSMTPD Remote Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.

Affected products

VendorProductAffected versions
OpenbsdOpensmtpd
Version 6.6
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Version 32
CanonicalUbuntu Linux
Versions 18.04, 19.10

Weakness classification

CWE-78CWE-755

References