CVE-2020-35679
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to...
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
CVE-2020-35679- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-401
- Updated
- 2026-11-02
CVE List No score
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
CVE-2020-35679- Updated
- 2026-11-02
EUVDEUVD-2020-23339 No score
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
EUVD-2020-23339- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-42p2-4vv3-9qv4
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to...
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
GHSA-42p2-4vv3-9qv4- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-401, CWE-772
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-35679
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
ALPINE-CVE-2020-35679- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
CVE-2020-35679- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-35679
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
DEBIAN-CVE-2020-35679- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-35679
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
- Record
UBUNTU-CVE-2020-35679- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensmtpdAlpine:v3.11 |
before 6.6.4p1-r1 | 6.6.4p1-r1 |
opensmtpdAlpine:v3.12 |
before 6.6.4p1-r2 | 6.6.4p1-r2 |
opensmtpdAlpine:v3.13 |
before 6.7.1p1-r1 | 6.7.1p1-r1 |
opensmtpdDebian:12 |
before 6.8.0p2-1 | 6.8.0p2-1 |
opensmtpdDebian:13 |
before 6.8.0p2-1 | 6.8.0p2-1 |
opensmtpdDebian:14 |
before 6.8.0p2-1 | 6.8.0p2-1 |
opensmtpdUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 5.3.3p1-45.4.1p1-15.4.1p1-1ubuntu0.1~esm1 |
None known |
opensmtpdUbuntu:20.04:LTS |
All versions, plus listed versions 6.0.3p1-66.0.3p1-6build16.6.1p1-16.6.1p1-36.6.1p1-46.6.1p1-56.6.2p1-16.6.4p1-1 |
None known |
opensmtpdUbuntu:22.04:LTS |
All versions, plus listed versions 6.8.0p2-36.8.0p2-46.8.0p2-4build1 |
None known |
opensmtpdUbuntu:24.04:LTS |
All versions, plus listed versions 7.3.0p1-17.3.0p2-17.4.0p1-17.4.0p1-1build27.4.0p1-1build4 |
None known |
opensmtpdUbuntu:25.10 |
All versions, plus listed versions 7.5.0p0-17.7.0p0-1 |
None known |
opensmtpdUbuntu:26.10 |
All versions, plus listed versions 7.8.0p0-27.8.0p0-2build1 |
None known |
opensmtpdUbuntu:26.04:LTS |
All versions, plus listed versions 7.7.0p0-17.8.0p0-17.8.0p0-2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-35679 is a high vulnerability (CVSS 7.5) in Opensmtpd, published December 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.79%, the 86th percentile. Fixed in opensmtpd 6.6.4p1-r1.
References
poolp.org/posts/2020-12-24/december-2020-opensmtpd-6.8.0p1-released-fixed-several-bugs-proposed-several-diffs-book-is-on-github
mail-archive.com/misc%40opensmtpd.org/msg05188.html
github.com/openbsd/src/commit/79a034b4aed29e965f45a13409268290c9910043
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYAYXRV2DM5K4RU7RHCDZSA2UF6VCTRC
security.gentoo.org/glsa/202105-12
Show 9 moreShow less
nvd.nist.gov/vuln/detail/CVE-2020-35679
security.alpinelinux.org/vuln/CVE-2020-35679
security-tracker.debian.org/tracker/CVE-2020-35679
ubuntu.com/security/CVE-2020-35679
cve.org/CVERecord?id=CVE-2020-35679