CVE-2026-101279: fallo de gravedad media en Trusted Domain Project OpenDMARC
Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow
Publicada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 6.9epss 0.3%
probabilidad de explotación
0.3%top 77% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc_policy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Trusted Domain Project · OpenDMARCPoCs públicas encontradas — 1
cve_referencexuyongzhe-vt.github.io/share/dmarc-pct-integer-handling.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Trusted Domain Project OpenDMARC
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-101281MEDIUMTrusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authenticationEPSS 0.4%CVE-2026-101280MEDIUMTrusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofingEPSS 0.4%CVE-2026-100890MEDIUMTrusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereferenceEPSS 0.4%CVE-2026-101017MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional conditionEPSS 0.3%CVE-2026-101016MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional conditionEPSS 0.3%CVE-2026-101014MEDIUMTrusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-oneEPSS 0.3%