VDB
CVE-2024-25768
CVE-2024-25768
PUBLISHED
CVSS 7.5 HIGH
OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c.
EPSS 0.08% · 23.4th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.08%
23.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| opendmarc | opendmarc | 1.4.2, 1.4.2 |
| n/a | n/a | n/a, n/a |
| trusteddomain | opendmarc | 1.4.2, 1.4.2, 1.4.2 |
Timeline
- Feb 26, 2024 CVE Published
- Feb 26, 2024 PoC Published
- Feb 26, 2024 PoC Published
- Feb 27, 2024 EPSS Score
- Mar 25, 2024 EPSS Score
- Apr 20, 2024 EPSS Score
- May 17, 2024 EPSS Score
- Jun 12, 2024 EPSS Score
- Jul 9, 2024 EPSS Score
- Aug 5, 2024 EPSS Score
- Aug 31, 2024 EPSS Score
- Sep 27, 2024 EPSS Score