Approved changes feed: RSS · Atom

cpe:2.3:a:opendkim:opendkim:2.11.0:beta0:*:*:*:*:*:*

part: a version: 2.11.0 update: beta0

VendorOpendkim (9040b9dd-8f1d-5756-961a-6ecf4d5502ce)
ProductOpendkim (19eb3015-9b41-5f0b-bb27-3bb6cb56e53f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/opendkim purl2cpe 2026-06-01 10:17:59.810024
pkg:deb/ubuntu/opendkim purl2cpe 2026-06-01 10:17:59.810025
pkg:github/trusteddomainproject/opendkim purl2cpe 2026-06-01 10:17:59.810027
pkg:rpm/fedora/opendkim purl2cpe 2026-06-01 10:17:59.810028
pkg:rpm/opensuse/opendkim purl2cpe 2026-06-01 10:17:59.810029
pkg:sourceforge/opendkim purl2cpe 2026-06-01 10:17:59.810031

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-48521 vulnerable 2026-06-08 05:51:34.689325 Details available
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.
Published: 2023-07-11T00:00:00.000Z
Updated: 2024-08-03T15:17:54.817Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.