Openbsd Opensmtpd — known CVE vulnerabilities

Every CVE whose affected-product data names Openbsd Opensmtpd, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2015-7687 — CVSS 9.8 (critical): Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary…
• CVE-2020-7247 — CVSS 9.8 (critical) — actively exploited: smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary…
• CVE-2013-2125 — CVSS 5.0 (medium): OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection…