CVE-2026-100888— Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write
Quick assessment
Affected
Trusted Domain Project OpenDKIM
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Trusted Domain Project OpenDKIM 2.11.0 及以下版本中存在一个安全弱点。该漏洞影响组件“DKIM 签名头选择”中的函数 dkim_canon_selecthdrs，具体位于文件 libopendkim/dkim-canon.c 中。通过操纵参数 h，可能导致越界写入。该攻击可远程实施。相关利用代码已公开，可能被用于实际攻击。尽管厂商在此次披露前已被联系，但并未作出任何回应。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-100888
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write
Source: CVE Program / CVE List V5
Vulnerability Description
A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Trusted Domain Project | OpenDKIM | 2.0 |
cpe:2.3:a:trusted_domain_project:opendkim:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-100888
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-100888
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-100888 (1)
Other References for CVE-2026-100888 (1)
-
https://vuldb.com/cve/CVE-2026-100888 third-party-advisory
IV. Related Vulnerabilities
Same vendor: Trusted Domain Project
-
CVE-2026-101017
Trusted Domain Project OpenDMARC opendmarc_policy.c strcasec -
CVE-2026-101016
Trusted Domain Project OpenDMARC opendmarc_policy.c opendmar -
CVE-2026-101015
Trusted Domain Project OpenDMARC policy.c improper validatio -
CVE-2026-101014
Trusted Domain Project OpenDMARC DMARC Record opendmarc_util -
CVE-2026-100895
Trusted Domain Project OpenARC libopenarc arc-canon.c arc_pa
Same weakness: CWE-787
-
CVE-2026-100740
D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_par -
CVE-2026-100504
Ghidra through 12.1.4 Stack-based Buffer Overflow via leftsh -
CVE-2026-80431
Out-of-bounds write in the kitty text sizing protocol allows -
CVE-2026-87118
Botslab G980H Dashcams Out-of-bounds Write -
CVE-2026-96746
Heap buffer overflow via mid-scan command list growth in cli
V. Comments for CVE-2026-100888
No comments yet