CVE-2003-0688
Fixed in a distro release EPSS 4%
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
Products: redhat sendmail, sendmail, sgi irix, compaq tru64, freebsd, openbsd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sendmail | 8.12.9 |
| Debian 13 | sendmail | 8.12.9 |
| Debian 14 | sendmail | 8.12.9 |