Log in Start free

Vulnerability · Published Sep 27, 2026 · Assigned by VulDB

CVE-2026-100888Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write

High 7.3

In plain English

A high-severity out-of-bounds write in OpenDKIM from Trusted Domain Project. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.3%top 77.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12opendkimno fix listedDEBIAN-CVE-2026-100888
Debian:13opendkimno fix listedDEBIAN-CVE-2026-100888
Debian:14opendkimno fix listedDEBIAN-CVE-2026-100888
Ubuntu:22.04:LTSopendkimno fix listedUBUNTU-CVE-2026-100888
Ubuntu:24.04:LTSopendkimno fix listedUBUNTU-CVE-2026-100888
Ubuntu:26.04:LTSopendkimno fix listedUBUNTU-CVE-2026-100888
Ubuntu:26.10opendkimno fix listedUBUNTU-CVE-2026-100888

Affected products (as reported)

VendorProductVersions
Trusted Domain Project OpenDKIM 2.02.12.22.32.42.52.62.7

Weakness: CWE-787, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

References