Sendmail
sendmailcounted 2026-10-10 04:20 UTC
As of 2026-10-10, 6 260 hosts ran Sendmail with at least one known CVE on a service open at their latest check, across 66 versions with CVEs; 26 distinct CVEs.
Known CVEs on hosts running it
6 260hosts with known CVEs
26distinct CVEs
66versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 1 207 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 8.16.1 | 2 491 | 2 |
| 8.15.2 | 1 398 | 2 |
| 8.14.7 | 1 258 | 3 |
| 8.14.4 | 391 | 3 |
| 8.14.9 | 169 | 2 |
| 8.13.8 | 129 | 4 |
| 8.14.3 | 38 | 4 |
| 8.17.1 | 34 | 1 |
| 8.15.2/8.15.2 | 33 | 2 |
| 8.14.2 | 30 | 4 |
| 8.14.5 | 27 | 3 |
| 8.13.1 | 26 | 8 |
| 8.14.7/8.14.7 | 20 | 3 |
| 8.15.1 | 20 | 2 |
| 8.12.11 | 19 | 8 |
| 8.12.8 | 18 | 12 |
| 8.17.2 | 17 | 1 |
| 8.12.10 | 15 | 8 |
| 8.14.4/8.14.4 | 9 | 3 |
| 8.13.8/8.13.8 | 8 | 4 |
| 8.14.3/8.14.3 | 8 | 3 |
| 8.16.1/8.16.1 | 8 | 2 |
| 8.13.6 | 7 | 6 |
| 8.15.2/8.15.2/debian-22ubuntu3 | 5 | 2 |
| 8.15.2/8.15.2/debian-14~deb10u3 | 5 | 2 |
| 8.15.2/8.15.2/debian-22+deb11u3 | 5 | 2 |
| 8.10.3 | 5 | 11 |
| 8.8.8/8.8.7 | 5 | 13 |
| 8.12.5 | 4 | 16 |
| 8.14.1 | 4 | 4 |
| 8.14.8 | 4 | 3 |
| 8.17.1/8.17.1 | 4 | 1 |
| 8.15.2/8.15.2/debian-18 | 3 | 2 |
| 8.16.1/8.15.2 | 3 | 2 |
| 8.17.1.9/8.17.1.9/debian-2+deb12u2 | 3 | 1 |
| 8.14.5+sun/8.14.5 | 3 | 3 |
| 8.16.1/8.14.7 | 3 | 2 |
| 8.11.6 | 2 | 16 |
| 8.12.11/8.13.1 | 2 | 7 |
| 8.13.3 | 2 | 7 |
| 8.13.4 | 2 | 7 |
| 8.13.7 | 2 | 5 |
| 8.15.2/8.15.2/debian-8+deb9u1 | 2 | 2 |
| 8.14.4/8.14.4/debian-4+deb7u1 | 1 | 3 |
| 8.12.8/8.12.8 | 1 | 7 |
| 8.13.1/8.13.1 | 1 | 6 |
| 8.14.4/8.14.4/debian-4 | 1 | 3 |
| 8.15.2/8.15.2/debian-3 | 1 | 2 |
| 8.17.1/8.16.1 | 1 | 1 |
| 8.12.11.20060308 | 1 | 7 |
16 more versions
| 8.12.2 | 1 hosts |
| 8.12.9 | 1 hosts |
| 8.13.5 | 1 hosts |
| 8.13.6/8.13.6 | 1 hosts |
| 8.13.8/8.13.8/smtpgate-20190903/smtpagate | 1 hosts |
| 8.14.1/8.14.1 | 1 hosts |
| 8.14.2/8.14.2 | 1 hosts |
| 8.14.6/8.14.6 | 1 hosts |
| 8.14.8/8.14.8 | 1 hosts |
| 8.15.1+sun/8.15.1 | 1 hosts |
| 8.15.2/8.14.7 | 1 hosts |
| 8.15.2/8.17.1.9/debian-2+deb12u2 | 1 hosts |
| 8.17.1.9/8.17.1.9 | 1 hosts |
| 8.17.1.9/8.17.1.9/debian-2 | 1 hosts |
| 8.9.1 | 1 hosts |
| 8.9.3 | 1 hosts |
12 more versions were seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2023-51765 MEDIUM 5.3 | 6 264 |
| CVE-2021-3618 HIGH 7.4 | 6 203 |
| CVE-2014-3956 LOW 1.9 | 2 053 |
| CVE-2009-4565 HIGH 7.5 | 330 |
| CVE-2006-4434 HIGH 7.5 | 118 |
| CVE-2006-1173 MEDIUM 5.0 | 115 |
| CVE-2009-1490 MEDIUM 5.0 | 102 |
| CVE-2005-2070 MEDIUM 5.0 | 62 |
| CVE-2006-0058 HIGH 7.6 | 31 |
| CVE-2003-0694 HIGH 10.0 | 28 |
| CVE-2003-0681 HIGH 7.5 | 28 |
| CVE-2003-0161 HIGH 10.0 | 27 |
| CVE-2003-0688 MEDIUM 5.0 | 23 |
| CVE-2002-1337 HIGH 10.0 | 16 |
| CVE-2001-0713 MEDIUM 4.6 | 14 |
| CVE-2001-0714 LOW 2.1 | 14 |
| CVE-2001-0715 LOW 2.1 | 14 |
| CVE-2002-2261 HIGH 7.5 | 9 |
| CVE-1999-1109 MEDIUM 5.0 | 7 |
| CVE-1999-0478 MEDIUM 5.0 | 6 |
| CVE-2002-2423 MEDIUM 6.4 | 5 |
| CVE-2002-1165 MEDIUM 4.6 | 5 |
| CVE-2002-1827 LOW 2.1 | 5 |
| CVE-2003-0308 HIGH 7.2 | 2 |
| CVE-2000-0319 MEDIUM 5.0 | 2 |
| CVE-1999-0976 LOW 2.1 | 1 |
Hosts: matches on services open at each host's latest check, over every version.