CVE-2015-7687

CRITICAL · CVSS 9.8 EPSS 4.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-7687

Severity

CRITICAL

CVSS

9.8

EPSS

4.09%

Original Filing — NVD Description

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.