{"id":"CVE-2021-20314","state":"PUBLISHED","title":"Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF exp","description":"Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.","publishedAt":"2021-08-12T14:37:09.000Z","updatedAt":"2025-02-13T16:27:45.177Z","severity":null,"assigner":"redhat","products":["n/a libspf2"],"affected":[{"vendor":"n/a","product":"libspf2","versions":[{"version":"1.2.11","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=1993070","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMSFT2NJDZ7PATRZSQPAOGSE7JD6ELOB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJRHPE5OSCPTNA3ZZ4ORDHT4JQH3Y4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6T4HYXXSUQCGJB2ES6X7Q74YYF7V7XU/","https://security.gentoo.org/glsa/202401-22"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:55.610Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/20xxx/CVE-2021-20314.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-20314","state":"PUBLISHED","datePublished":"2021-08-12T14:37:09.000Z","dateUpdated":"2025-02-13T16:27:45.177Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2020-12-17T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages."}],"affected":[{"vendor":"n/a","product":"libspf2","versions":[{"version":"1.2.11","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993070","tags":["x_refsource_MISC"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMSFT2NJDZ7PATRZSQPAOGSE7JD6ELOB/","name":"FEDORA-2021-aa8637c985","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJRHPE5OSCPTNA3ZZ4ORDHT4JQH3Y4/","name":"FEDORA-2021-994751581f","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6T4HYXXSUQCGJB2ES6X7Q74YYF7V7XU/","name":"FEDORA-2021-044be3d54e","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://security.gentoo.org/glsa/202401-22"}],"problemTypes":[{"descriptions":[{"description":"stack buffer overflow","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2024-01-15T17:06:16.537Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993070","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMSFT2NJDZ7PATRZSQPAOGSE7JD6ELOB/","name":"FEDORA-2021-aa8637c985","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJRHPE5OSCPTNA3ZZ4ORDHT4JQH3Y4/","name":"FEDORA-2021-994751581f","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y6T4HYXXSUQCGJB2ES6X7Q74YYF7V7XU/","name":"FEDORA-2021-044be3d54e","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202401-22","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T17:37:23.882Z"}}]}}}