Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libspf2: buffer overflow

Package(s):

libspf2

CVE #(s):

CVE-2008-2469

Created:

October 24, 2008

Updated:

October 31, 2008

Description:

From the Debian advisory: Dan Kaminsky discovered that libspf2, an implementation of the Sender Policy Framework (SPF) used by mail servers for mail filtering, handles malformed TXT records incorrectly, leading to a buffer overflow condition

Alerts:

Gentoo	200810-03	2008-10-30
Debian	DSA-1659-1	2008-10-23

(Log in to post comments)