PatchTheCVEstafford.uklinux vulnerabilities
Recent CVEs affecting stafford.uklinux products. 2 tracked.
stafford.uklinux has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2010-03-31. Highest priority: CVE-2010-1194 (score 47/100).
- CVE-2010-1194 MEDIUM 6.8 DOWNGRADE The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4,
- CVE-2010-1192 MEDIUM 6.8 UPGRADE libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name in the subjec
FAQ
How do I fix stafford.uklinux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is stafford.uklinux being exploited right now?
None of the tracked stafford.uklinux CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which stafford.uklinux CVE should I patch first?
CVE-2010-1194 currently ranks highest (47/100): The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, .