Weitongli

**Name of the Vulnerable Software and Affected Versions** OpenDMARC versions prior to 1.4.3 **Description** An issue exists in the Internationalized Domain Name Handler component within the `opendmarc policy query dmarc()` function located in the `libopendmarc/opendmarc policy.c` library. A remote attacker can manipulate this function to cause an encoding error. **Recommendations** Update OpenDMARC to a version newer than 1.4.2. As a temporary mitigation, restrict the use of the `opendmarc policy query dmarc()` function.

**Name of the Vulnerable Software and Affected Versions** OpenDMARC versions prior to 1.4.3 **Description** A remote attack can be initiated against the DMARC Record Parser component. The issue resides in the `opendmarc util cleanup()` function within the `libopendmarc/opendmarc util.c` library, where a manipulation leads to an off-by-one error. An off-by-one is a specific type of error where an iterative loop or memory allocation is off by a single unit, potentially leading to memory corruption. **Recommendations** Deploy patch b3b1da9264bc80324094a27c71e7369bdedc62ae for versions prior to 1.4.3.

**Name of the Vulnerable Software and Affected Versions** Trusted Domain Project OpenDMARC versions prior to 1.4.3 **Description** A flaw exists in the Domain Handler component within the `policy.c` file. A remote attacker can perform a manipulation that leads to improper validation of unsafe equivalence in input. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenDMARC versions prior to 1.4.3 **Description** A flaw in the SPF Parser component exists within the `opendmarc spf ipv6 explode()` function located in the `libopendmarc/opendmarc spf.c` library. A remote attacker can trigger a null pointer dereference, which occurs when a program attempts to read from a memory address that is null, by manipulating the `cp` argument. **Recommendations** Update to a version newer than 1.4.2. As a temporary mitigation, restrict the processing of SPF records that may trigger the `opendmarc spf ipv6 explode()` function.

**Name of the Vulnerable Software and Affected Versions** Trusted Domain Project OpenARC versions prior to 1.0.0.Beta0 **Description** A security flaw in the `libopenarc` component allows for a remote attack. The issue resides in the `arc parse canon t()` function within the `libopenarc/arc-canon.c` library, where specific manipulation leads to a null pointer dereference, a condition where the software attempts to read from a memory address that is null, typically resulting in a crash. **Recommendations** Update to version 1.0.0.Beta0. As a temporary mitigation, restrict access to the `arc parse canon t()` function within the `libopenarc` component.

**Name of the Vulnerable Software and Affected Versions** OpenDKIM versions prior to 2.11.1 **Description** A remote off-by-one error exists in the Decoder component within the `dkim qp decode()` function of the `util.c` file. An off-by-one error occurs when a program writes one byte past the end of the buffer, which can lead to memory corruption. **Recommendations** Update to a version newer than 2.11.0. As a temporary mitigation, restrict the use of the `dkim qp decode()` function.

**Name of the Vulnerable Software and Affected Versions** OpenDKIM versions prior to 2.11.1 **Description** A weakness exists in the DKIM Signature Header Selection component within the `dkim canon selecthdrs()` function of the `libopendkim/dkim-canon.c` file. A remote attacker can manipulate the `h` argument to trigger an out-of-bounds write, which occurs when data is written outside the intended memory boundary of a buffer. **Recommendations** Update OpenDKIM to a version newer than 2.11.0. As a temporary mitigation, restrict access to the `dkim canon selecthdrs()` function to minimize the risk of exploitation.