Libspf2

This hub aggregates every CVE we track for Libspf2, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Libspf2.

• CVE-2023-42118Exim libspf2 Integer Underflow Remote Code Execution Vulnerability8.8May 3, 2024
• CVE-2021-33913libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a craft...9.8Jan 19, 2022
• CVE-2021-33912libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) wi...9.8Jan 19, 2022
• CVE-2021-20314Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.9.8Aug 12, 2021
• CVE-2008-2469Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modif...10.0Oct 23, 2008