CVE-2020-7845
About
Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet.
Rainforest analyst review
Spamsniper contains a stack-based buffer overflow in its parsing of the SMTP MAIL FROM command, caused by missing boundary checks, and a crafted packet can drive it to remote code execution. It's unauthenticated, though the elevated attack complexity signals the exploit isn't a guaranteed one-shot.
A mail-security gateway is internet-facing by definition, sitting right on the SMTP path, so a memory-corruption RCE there hands an attacker a position at the front door of the mail flow. The higher complexity suggests some reliability hurdle, but on an always-exposed service that's a speed bump, not a wall.
Our emphasis is exposure and version inventory: these appliances are reachable from the internet by design, so we identify which Spamsniper versions are running and lean on monitoring of the SMTP-facing surface. An internet-exposed instance in the affected range is a genuine priority given the RCE payoff.
References
Related CVEs
Frequently asked questions
What is CVE-2020-7845?
Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet.
How severe is CVE-2020-7845?
CVE-2020-7845 carries a CVSS 3.1 base score of 8.1, rated high. On the Rainforest Risk Index — which weighs the severity alongside how easy the flaw is to reach and how broad its impact is — it scores 90 out of 100, in the critical band.
How is CVE-2020-7845 exploited?
According to the CVSS vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H): attack vector Network, attack complexity High, privileges required None, user interaction None. Impact on confidentiality High, integrity High and availability High.
Which products are affected by CVE-2020-7845?
Public advisories list the following as affected: spamsniper. Check the references on this page for the exact versions each vendor confirms.
How do I fix CVE-2020-7845?
Apply the fix the vendor published — the references on this page link to the primary advisories and patches. When patching can't happen right away, reduce the exposure of the affected component and watch it for exploitation attempts. Rainforest customers see this vulnerability correlated to their own assets and prioritized by real exposure, not by score alone.
Empower Your Security Strategy with Rainforest
Discover vulnerabilities early, prioritize critical threats, and protect what truly matters. Rainforest streamlines your security operations, saving you time and reducing costs, so you can focus on what drives your business forward.