8.14.7

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-24	CVE-2023-51765	Insufficient Verification of Data Authenticity vulnerability in multiple products sendmail through 8.17.2 allows SMTP smuggling in certain configurations. network low complexity sendmail freebsd redhat CWE-345	5.3
2022-03-23	CVE-2021-3618	Improper Certificate Validation vulnerability in multiple products ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. network high complexity f5 sendmail vsftpd-project fedoraproject debian CWE-295	7.4
2014-06-04	CVE-2014-3956	Information Exposure vulnerability in multiple products The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program. local freebsd hp fedoraproject sendmail CWE-200	1.9