A flaw was found in OpenDKIM. A remote attacker can exploit this flaw to cause a Denial of Service (DoS) or potentially arbitrary code execution by submitting a specially crafted DomainKeys Identified Mail (DKIM) signature header. In the dkim_canon_selecthdrs function, improper processing of the 'h' header tag triggers an out-of-bounds write and memory corruption.
Last checked: 2026-09-30 23:59 UTC
Proof of concept · CISA Coordinator (Assessed 2026-09-30 22:16 UTC)
Fix evidence last checked: 2026-09-28 02:53 UTC