CVE-2003-0688

描述

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.

如何修補 CVE-2003-0688

要修補 CVE-2003-0688,請將受影響套件升級到下列已修補版本。

• Debian/sendmail—升級至 8.12.9 或更新版本

CVE-2003-0688 正在被利用嗎?

低 — EPSS 為 3.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 8.12.9

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2003-0688