CVE-2023-51765

CWE-345CWE-4519 documents7 sources
Severity
5.3MEDIUM
EPSS
0.8%
top 25.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Freebsd FreebsdSendmail SendmailRedhat Enterprise Linux
Timeline
PublishedDec 24
Latest updateJan 5

Description

sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports . but some other popular e-mail servers do not. This is resolved in 8.18 and later versions with 'o' in srv_features.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶NVDsendmail/sendmail< 8.18.0.2
▶Debiansendmail< 8.15.2-22+deb11u1+3
▶NVDfreebsd/freebsd< 11.0

Also affects: Enterprise Linux 8.0, 9.0

Patches

Patch: bugzilla.suse.com ↗Patch: github.com ↗Patch: bugzilla.suse.com ↗

🔴Vulnerability Details

3
OSV
CVE-2023-51765: sendmail through 8↗2023-12-24
▶
GHSA
GHSA-5rcq-25vc-g8qr: sendmail through at least 8↗2023-12-24
▶
CVEList
CVE-2023-51765: sendmail through 8↗2023-12-24
▶

🔍Detection Rules

3
Suricata
ET EXPLOIT Inbound Setup Message from SMTP Smuggling Tool↗2024-01-05
▶
Suricata
ET EXPLOIT Inbound Smuggling Message from SMTP Smuggling Tool M2↗2024-01-05
▶
Suricata
ET EXPLOIT Inbound Smuggling Message from SMTP Smuggling Tool M1↗2024-01-05
▶

📋Vendor Advisories

2
Red Hat
sendmail: SMTP smuggling vulnerability↗2023-12-18
▶
Debian
CVE-2023-51765: sendmail - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote ...↗2023
▶
CVE-2023-51765 (MEDIUM CVSS 5.3) | sendmail through 8.17.2 allows SMTP | cvebase.io