CVE-2008-3962: Ssmtp

Low severity, CVSS 2.6. EPSS: 2% chance of exploitation in the next 30 days.

The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message.

Affected products

• Ssmtp Ssmtp: version 2.61 only; version 2.62 only

Published 2008-09-11. Last modified 2026-06-16.