Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.
| Software | From | Fixed in |
|---|---|---|
| libspf2 / libspf2 | - | 1.2.11 |
| redhat / enterprise_linux | 7.0 | 7.0.x |
| fedoraproject / fedora | 33 | 33.x |
| fedoraproject / fedora | 34 | 34.x |
| fedoraproject / fedora | 35 | 35.x |