SMTP OpenSMTPD mta_io Out-of-Bounds-Read Command Execution (CVE-2020-8794)

Rule ID

1136897

Severity

Critical

Description

An out-of-bounds read vulnerability has been reported in the client functionality of OpenSTMPD. The vulnerability is due to improper handling of multiline replies in mta_io().

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Exploits

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A