CVE-2023-29323: High severity opensmtpd vulnerability
asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29323?
The severity of CVE-2023-29323 is high with a CVSS score of 7.8.
What is the affected software for CVE-2023-29323?
The affected software for CVE-2023-29323 is OpenSMTPD version up to 7.0.0, OpenBSD 7.1, and OpenBSD 7.2.
How can ascii_load_sockaddr in smtpd be exploited in CVE-2023-29323?
The vulnerability in ascii_load_sockaddr in smtpd can be exploited by initiating a connection from a local, scoped IPv6 address.
Is there a fix available for CVE-2023-29323?
Yes, the fix for CVE-2023-29323 is available in OpenBSD errata 024 for version 7.1 and in OpenBSD errata 020 for version 7.2, as well as in OpenSMTPD Portable commit f748277 for version 7.0.0.
Where can I find more information about CVE-2023-29323?
You can find more information about CVE-2023-29323 at the following references: [link1], [link2], [link3].