OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 937aa1d6-685e-11ec-a636-000c29061ce6 advisory.

  - OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with     multiple From: addresses, which might affect applications that consider a domain name to be relevant to     the origin of an e-mail message. (CVE-2019-16378)

  - OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and     DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field.
    (CVE-2019-20790)

  - OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false     information about the domain that originated an e-mail message. This is caused by incorrect parsing and     interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com     substring. (CVE-2020-12272)

  - OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function     opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially     crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte overwrites the     heap metadata of the next chunk and its PREV_INUSE flag. (CVE-2020-12460)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4567-1 advisory.

    It was discovered that OpenDMARC is prone to a signature-bypass vulnerability with multiple From:
    addresses. An attacker could use it to bypass spam and abuse filters.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update provides the final 1.3.2 release (previously the package was 1.3.2 beta). It also includes the previously-omitted database schema directory (resolving [#1415753](https://bugzilla.redhat.com/show_bug.cgi?id=1415753)) and rddmarc tools, and backports proposed fixes for a [crasher bug](https://bugzilla.redhat.com/show_bug.cgi?id=1673293) and [security issue CVE-2019-16378](https://bugzilla.redhat.com/show_bug.cgi?id=1753081) from upstream submissions.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that OpenDMARC, a milter implementation of DMARC, is prone to a signature-bypass vulnerability with multiple From:
addresses.

ID	Name	Product	Family	Severity
184467	FreeBSD : OpenDMARC - Multiple vulnerabilities (937aa1d6-685e-11ec-a636-000c29061ce6)	Nessus	FreeBSD Local Security Checks	critical
141183	Ubuntu 18.04 LTS : OpenDMARC vulnerability (USN-4567-1)	Nessus	Ubuntu Local Security Checks	critical
129949	Fedora 30 : opendmarc (2019-24b3f84f6e)	Nessus	Fedora Local Security Checks	critical
129837	Fedora 29 : opendmarc (2019-e1f0417a24)	Nessus	Fedora Local Security Checks	critical
129072	Debian DSA-4526-1 : opendmarc - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2019-16378

critical

Tenable Plugins

critical

critical

critical

critical

critical