Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA 200810-03 High: libspf2 DNS Response Buffer Overflow

gentoo
Calendar Grey October 30, 2008
Scroller Gentoo
Critical Gentoo alert GLSA 202210-05: libxml2 flaw permits remote code execution through buffer overflow.
A memory management error in libspf2 might allow for remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200810-03 https://security.gentoo.org/ Severity: High Title: libspf2: DNS response buffer overflow Date: October 30, 2008 Bugs: #242254 ID: 200810-03

Synopsis ======= A memory management error in libspf2 might allow for remote execution of arbitrary code.
Background ========= libspf2 is a library that implements the Sender Policy Framework, allowing mail transfer agents to make sure that an email is authorized by the domain name that it is coming from. Currently, only the exim MTA uses libspf2 in Gentoo.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 mail-filter/libspf2 < 1.2.8 >= 1.2.8
========== libspf2 uses a fixed-l...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity gentoo buffer overflow remote code execution dns response libspf2

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo buffer overflow remote code execution dns response libspf2

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround