Stafford.uklinux Libesmtp — known CVE vulnerabilities

Every CVE whose affected-product data names Stafford.uklinux Libesmtp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2010-1192 — CVSS 6.8 (medium): libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of…
• CVE-2010-1194 — CVSS 6.8 (medium): The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal…