VULNERABILITY INTELLIGENCE

CVE-2021-20314

CVSS score9.8 CRITICAL
EPSS probability2.83%
CISA KEVNot currently listed
Published2021-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.

Weakness classification

  • nvd@nist.gov: CWE-787

Primary references