CVE-2009-1490
Fixed in a distro release EPSS 13%
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.
Products: sendmail
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sendmail | 8.13.2-0 |
| Debian 13 | sendmail | 8.13.2-0 |
| Debian 14 | sendmail | 8.13.2-0 |