trusteddomainproject/OpenDMARC

GitHub

github.com

Releases55

Frequency2 months 3 days

Last Release over 4 years ago

Stars130

This is the Trusted Domain Project's impementation of the DMARC protocol libary and mail filter, called OpenDMARC. A "milter" connects to unix-based mailers (originally, sendmail, but now many) and provides a standard filtering API.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-34555 ↗	Jun 10, 2021Thursday, 10 June 2021, 15:15	7.5 HIGH	5 MEDIUM
OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.
CVE-2020-12460 ↗	Jul 27, 2020Monday, 27 July 2020, 23:15	9.8 CRITICAL	7.5 HIGH
OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte overwrites the heap metadata of the next chunk and its PREV_INUSE flag.
CVE-2019-16378 ↗	Sep 17, 2019Tuesday, 17 September 2019, 12:15	9.8 CRITICAL	7.5 HIGH
OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message.