CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-8793

OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.4%

CVSS Severity

CVSS v3 Score 4.7

CVSS v2 Score 4.7

References

Products affected by CVE-2020-8793

Opensmtpd » Opensmtpd » Version: 5.0

cpe:2.3:a:opensmtpd:opensmtpd:5.0
Opensmtpd » Opensmtpd » Version: 5.2.1

cpe:2.3:a:opensmtpd:opensmtpd:5.2.1
Opensmtpd » Opensmtpd » Version: 5.3

cpe:2.3:a:opensmtpd:opensmtpd:5.3
Opensmtpd » Opensmtpd » Version: 5.3.1

cpe:2.3:a:opensmtpd:opensmtpd:5.3.1
Opensmtpd » Opensmtpd » Version: 5.3.2

cpe:2.3:a:opensmtpd:opensmtpd:5.3.2
Opensmtpd » Opensmtpd » Version: 5.3.3

cpe:2.3:a:opensmtpd:opensmtpd:5.3.3
Opensmtpd » Opensmtpd » Version: 5.4

cpe:2.3:a:opensmtpd:opensmtpd:5.4
Opensmtpd » Opensmtpd » Version: 5.4.1

cpe:2.3:a:opensmtpd:opensmtpd:5.4.1
Opensmtpd » Opensmtpd » Version: 5.4.2

cpe:2.3:a:opensmtpd:opensmtpd:5.4.2
Opensmtpd » Opensmtpd » Version: 5.4.4

cpe:2.3:a:opensmtpd:opensmtpd:5.4.4
Opensmtpd » Opensmtpd » Version: 5.4.5

cpe:2.3:a:opensmtpd:opensmtpd:5.4.5
Opensmtpd » Opensmtpd » Version: 5.4.6

cpe:2.3:a:opensmtpd:opensmtpd:5.4.6
Opensmtpd » Opensmtpd » Version: 5.4.6-2

cpe:2.3:a:opensmtpd:opensmtpd:5.4.6-2
Opensmtpd » Opensmtpd » Version: 5.7.1

cpe:2.3:a:opensmtpd:opensmtpd:5.7.1
Opensmtpd » Opensmtpd » Version: 5.7.2

cpe:2.3:a:opensmtpd:opensmtpd:5.7.2
Opensmtpd » Opensmtpd » Version: 5.7.3

cpe:2.3:a:opensmtpd:opensmtpd:5.7.3
Opensmtpd » Opensmtpd » Version: 5.9.1

cpe:2.3:a:opensmtpd:opensmtpd:5.9.1
Opensmtpd » Opensmtpd » Version: 5.9.2

cpe:2.3:a:opensmtpd:opensmtpd:5.9.2
Opensmtpd » Opensmtpd » Version: 6.0.0

cpe:2.3:a:opensmtpd:opensmtpd:6.0.0
Opensmtpd » Opensmtpd » Version: 6.0.2

cpe:2.3:a:opensmtpd:opensmtpd:6.0.2
Opensmtpd » Opensmtpd » Version: 6.0.3

cpe:2.3:a:opensmtpd:opensmtpd:6.0.3
Opensmtpd » Opensmtpd » Version: 6.4.0

cpe:2.3:a:opensmtpd:opensmtpd:6.4.0
Opensmtpd » Opensmtpd » Version: 6.4.1

cpe:2.3:a:opensmtpd:opensmtpd:6.4.1
Opensmtpd » Opensmtpd » Version: 6.4.2

cpe:2.3:a:opensmtpd:opensmtpd:6.4.2
Opensmtpd » Opensmtpd » Version: 6.6.0

cpe:2.3:a:opensmtpd:opensmtpd:6.6.0
Opensmtpd » Opensmtpd » Version: 6.6.1

cpe:2.3:a:opensmtpd:opensmtpd:6.6.1
Opensmtpd » Opensmtpd » Version: 6.6.2

cpe:2.3:a:opensmtpd:opensmtpd:6.6.2
Opensmtpd » Opensmtpd » Version: 6.6.3

cpe:2.3:a:opensmtpd:opensmtpd:6.6.3
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.10

cpe:2.3:o:canonical:ubuntu_linux:19.10
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-8793

Products

Pricing

Contact Us