CVE-2026-101017: Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition
A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarcpolicy.c. The manipulation results in handling of exceptional conditions. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments should be considered exposed?
Trusted Domain Project OpenDMARC deployments running version 1.4.2 or earlier should be considered affected based on the available information. The issue is in libopendmarc/opendmarc_policy.c.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network access, low attack complexity, no privileges, and no user interaction are required.
What is the expected impact if exploited?
The provided severity vector indicates no confidentiality impact, with low integrity and low availability impact. The flaw results in handling of exceptional conditions.
Is public exploit code available?
Yes. The vulnerability information states that an exploit has been made public and could be used.