OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ede832bf-6576-11ec-a636-000c29061ce6 advisory.

  - OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference     and application crash) via a multi-value From header field. (CVE-2021-34555)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference
    and application crash) via a multi-value From header field. (CVE-2021-34555)

ID	Name	Product	Family	Severity
184462	FreeBSD : OpenDMARC - Remote denial of service (ede832bf-6576-11ec-a636-000c29061ce6)	Nessus	FreeBSD Local Security Checks	high
405907	Alpine: multiple opendmarc packages: security update to 1.4.1.1-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405907	Alpine: multiple opendmarc packages: security update to 1.4.1.1-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400182	Alpine: multiple opendmarc packages: security update to 1.4.1.1-r2 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400182	Alpine: multiple opendmarc packages: security update to 1.4.1.1-r2 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2021-34555

high

Tenable Plugins

high

high

high

high

high