Sendmail

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-51765 MEDIUM POC PATCH This Month

sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Sendmail Freebsd Enterprise Linux

NVD GitHub

CVSS 3.1

5.3

EPSS

1.1%

CVE-2014-3956 LOW PATCH Monitor

The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access. Rated low severity (CVSS 1.9). This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Freebsd Hpux Fedora Sendmail

NVD

CVSS 2.0

1.9

EPSS

0.1%

CVE-2023-51765

EPSS 1% CVSS 5.3

MEDIUM POC PATCH This Month

Authentication Bypass Sendmail Freebsd +1

NVD GitHub

CVE-2014-3956

EPSS 0% CVSS 1.9

LOW PATCH Monitor

Information Disclosure Freebsd Hpux +2

NVD