What is CVE-2024-34083?

CVE-2024-34083 is a medium-severity vulnerability in Aio-libs Aiosmtpd, classified under CWE-349. CVSS score: 5.4/10. Published 2024-05-18.

How severe is CVE-2024-34083?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Vulnerability in Aio-libs Aiosmtpd

CVE-2024-34083

aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted con…

EPSS: 0.002 (13.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Aio-libs Aiosmtpd — versions < 1.4.6

Weakness classification (CWE)

CWE-349

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-34083?: CVE-2024-34083 is a medium-severity vulnerability in Aio-libs Aiosmtpd, classified under CWE-349. CVSS score: 5.4/10. Published 2024-05-18.
How severe is CVE-2024-34083?: Medium severity. CVSS v3 base score is 5.4 out of 10.