CVE-2005-1515: Dan Bernstein Qmail

Medium severity, CVSS 5.0. EPSS: 6.5% chance of exploitation in the next 30 days.

Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands.

Affected products

• Dan Bernstein Qmail: any version

Published 2005-05-11. Last modified 2026-06-16.