CVE-2020-7845 Jiransecurity Spamsniper Stack-based Buffer Overflow Vulnerability
Remote attackers can execute arbitrary code via crafted packets due to a stack-based buffer overflow in Spamsniper's MAIL FROM parsing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7845?
CVE-2020-7845 is a high-severity memory corruption vulnerability in Jiransecurity Spamsniper, published on 27 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet.
Which versions are affected by CVE-2020-7845?
It affects 1 product.
Products include Jiransecurity Spamsniper.
How do I fix CVE-2020-7845?
No fix has been published for CVE-2020-7845 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-7845 being exploited?
There is no known exploitation of CVE-2020-7845 in the wild and no public exploit code.
Sources
Also known as GHSA-c4mq-vprg-6v7w.