CVE-2020-8794

OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.

• CWE-125

• http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Feb/32Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/02/26/1Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/03/01/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/03/01/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/05/04/7Exploit, Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/
• https://usn.ubuntu.com/4294-1/Patch, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4634Third Party Advisory
• https://www.openbsd.org/security.htmlThird Party Advisory
• https://www.openwall.com/lists/oss-security/2020/02/24/5Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/156633/OpenSMTPD-Out-Of-Bounds-Read-Local-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Feb/32Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/02/26/1Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/03/01/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/03/01/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/05/04/7Exploit, Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/
• https://usn.ubuntu.com/4294-1/Patch, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4634Third Party Advisory
• https://www.openbsd.org/security.htmlThird Party Advisory
• https://www.openwall.com/lists/oss-security/2020/02/24/5Exploit, Mailing List, Third Party Advisory

Published

Feb 25, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8788Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows X…6.1
• CVE-2020-8789Composr 10.0.30 allows Persistent XSS via a Usergroup name u…5.4
• CVE-2020-8790The OKLOK (3.1.1) mobile companion app for Fingerprint Bluet…9.8
• CVE-2020-8791The OKLOK (3.1.1) mobile companion app for Fingerprint Bluet…6.5
• CVE-2020-8792The OKLOK (3.1.1) mobile companion app for Fingerprint Bluet…5.3
• CVE-2020-8793OpenSMTPD before 6.6.4 allows local users to read arbitrary …4.7
• CVE-2020-8795In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sha…7.5
• CVE-2020-8796Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1x…9.8
• CVE-2020-8797Juplink RX4-1500 v1.0.3 allows remote attackers to gain root…6.7
• CVE-2020-8798httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attack…5.5
• CVE-2020-8799A Stored XSS vulnerability has been found in the administrat…4.8
• CVE-2020-8800SuiteCRM through 7.11.11 allows EmailsControllerActionGetFro…8.8