Sploitus

CVE-2020-8794

9 known exploits for CVE-2020-8794

OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.

Affected products
Opensmtpd, Ubuntu
Opensmtpd
< 6.6.4
Fix
Available
CVSS 2.0
10.0 HIGH
CVSS 3.1
9.8 CRITICAL
EPSS
88.9% (100th percentile)
Weakness
CWE-125
NVD status
Modified
Published
2020-02-25
CVE-2020-8794 at NVD
Authoritative description, scoring and affected products

9 known exploits for CVE-2020-8794

Proof-of-concept code and exploit modules indexed by Sploitus

📄 Qualys Security Advisory - Exim 21Nails Advisory
2026-02-11 Qualys Security AdvisoryPACKETSTORMPerl
OpenSMTPD - OOB Read Local Privilege Escalation (Metasploit)
2020-03-09 MetasploitEXPLOITDBRuby
OpenSMTPD Out-Of-Bounds Read / Local Privilege Escalation Exploit
2020-03-06 metasploitZDTRuby
OpenSMTPD Out-Of-Bounds Read / Local Privilege Escalation
2020-03-05 wvuPACKETSTORMRuby
OpenSMTPD < 6.6.3p1 - Local Privilege Escalation / Remote Code Execution Exploit
2020-02-26 Qualys CorporationZDTC
OpenSMTPD 6.6.3p1 - Local Privilege Escalation + Remote Code Execution
2020-02-26 Qualys CorporationEXPLOITPACKC
OpenSMTPD < 6.6.3p1 - Local Privilege Escalation + Remote Code Execution
2020-02-26 Qualys CorporationEXPLOITDBC
OpenSMTPD Out-Of-Bounds Read
2020-02-25 Qualys Security AdvisoryPACKETSTORM
OpenSMTPD OOB Read Local Privilege Escalation
2020-02-24 Qualys, wvu <wvu@metasploit.com>METASPLOITRuby