Patchwire CVEs, their patch status, and feeds to follow them

CVE-2009-1490

Fixed in a distro release EPSS 13%

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

Published 2009-05-05 · CVE record · OSV

Products: sendmail

Distro releases

ReleasePackageFixed in
Debian 12sendmail8.13.2-0
Debian 13sendmail8.13.2-0
Debian 14sendmail8.13.2-0