Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sendmail异步信号处理竞争条件漏洞
Vulnerability Description
Sendmail是很多大型站点都在使用的邮件传输代理(MTA)。 Sendmail在接收和处理远程客户端的邮件数据时存在信号竞争漏洞,远程攻击者可能利用此漏洞在服务器上执行任意指令。 Sendmail使用信号处理器来处理非异步安全的超时,该信号处理器的某些函数中断会导致静态数据元素处于不一致的状态。攻击者可以利用这些数据元素向堆或栈中的无效部分写入数据,这样就可以完全控制有漏洞的进程。
CVSS Information
N/A
Vulnerability Type
N/A