CVE-2022-48521 Security feature bypass in n/a
Remote attackers can bypass DKIM signature verification by crafting emails with fake Authentication-Results headers, causing systems to trust unsigned messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-48521?
CVE-2022-48521 is a medium-severity vulnerability in n/a, published on 11 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.
Which versions are affected by CVE-2022-48521?
It affects 1 product.
Products include Opendkim Opendkim.
How do I fix CVE-2022-48521?
Apply the vendor's patch.
Is CVE-2022-48521 being exploited?
There is no known exploitation of CVE-2022-48521 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2022-48521, DLA-3680-1, GHSA-3q5m-9r3g-pqfj, UBUNTU-CVE-2022-48521.