Patchwire CVEs, their patch status, and feeds to follow them

CVE-2003-0688

Fixed in a distro release EPSS 4%

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.

Published 2003-09-03 · CVE record · OSV

Products: redhat sendmail, sendmail, sgi irix, compaq tru64, freebsd, openbsd

Distro releases

ReleasePackageFixed in
Debian 12sendmail8.12.9
Debian 13sendmail8.12.9
Debian 14sendmail8.12.9