CVE-2015-7687

Critical

Published: 16/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.

Risk Assessment

This vulnerability could lead to service downtime or unauthorized access to the system, posing a significant security risk to the organization.

Recommendation

It is recommended to upgrade OpenSMTPD to version 5.7.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.