Critical severity9.8NVD Advisory· Published Oct 16, 2017· Updated Jun 17, 2026
CVE-2015-7687
CVE-2015-7687
Description
Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- www.qualys.com/2015/10/02/opensmtpd-audit-report.txtnvdExploitTechnical DescriptionThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-November/170448.htmlnvdThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-October/169600.htmlnvdThird Party Advisory
- www.openwall.com/lists/oss-security/2015/10/03/1nvdMailing ListThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/76975nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryVDB Entry
- www.opensmtpd.org/announces/release-5.7.2.txtnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.