Vulnerability Details CVE-2021-33912
libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a crafted SPF DNS record, because of incorrect sprintf usage in SPF_record_expand_data in spf_expand.c. The vulnerable code may be part of the supply chain of a site's e-mail infrastructure (e.g., with additional configuration, Exim can use libspf2; the Postfix web site links to unofficial patches for use of libspf2 with Postfix; older versions of spfquery relied on libspf2) but most often is not.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 9.3
Products affected by CVE-2021-33912
-
cpe:2.3:a:libspf2_project:libspf2:-
-
cpe:2.3:a:libspf2_project:libspf2:0.4.0
-
cpe:2.3:a:libspf2_project:libspf2:1.0.2
-
cpe:2.3:a:libspf2_project:libspf2:1.0.3
-
cpe:2.3:a:libspf2_project:libspf2:1.0.4
-
cpe:2.3:a:libspf2_project:libspf2:1.2.1
-
cpe:2.3:a:libspf2_project:libspf2:1.2.10
-
cpe:2.3:a:libspf2_project:libspf2:1.2.2
-
cpe:2.3:a:libspf2_project:libspf2:1.2.3
-
cpe:2.3:a:libspf2_project:libspf2:1.2.4
-
cpe:2.3:a:libspf2_project:libspf2:1.2.5
-
cpe:2.3:a:libspf2_project:libspf2:1.2.6
-
cpe:2.3:a:libspf2_project:libspf2:1.2.7
-
cpe:2.3:a:libspf2_project:libspf2:1.2.8
-
cpe:2.3:a:libspf2_project:libspf2:1.2.9
-
cpe:2.3:o:debian:debian_linux:9.0