VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 11, 2023· Updated Jun 17, 2026

CVE-2022-48521

CVE-2022-48521

Description

An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • OpenDKIM/OpenDKIM5 versions
    cpe:2.3:a:opendkim:opendkim:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:opendkim:opendkim:*:*:*:*:*:*:*:*range: <=2.10.3
    • cpe:2.3:a:opendkim:opendkim:2.11.0:beta0:*:*:*:*:*:*
    • cpe:2.3:a:opendkim:opendkim:2.11.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opendkim:opendkim:2.11.0:beta2:*:*:*:*:*:*
    • (no CPE)range: <=2.10.3, <=2.11.0-Beta2
  • OpenDKIM/OpenDKIMdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.