HomeFreeBSD

- Prevent OpenSMTPD session hangs and retain a descriptor forever on empty body

Description

  • Prevent OpenSMTPD session hangs and retain a descriptor forever on empty body (i.e. when the dot appears on the line directly after the headers). This could be used by an attacker to exhaust resources.

PR: 227899
Submitted by: grembo
Obtained from: OpenSMTPD git repo (backported)
MFH: 2018Q2

Details