[ Vendor · 6 CVEs ]
Exim
CVEs affecting Exim published in the last 30 days, plus any Exim CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2019-16928 | 27 Sep 2019 | CVSS 9.8 | Exim Out-of-bounds WriteExim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in… | ExploitedFix |
| CVE-2019-10149 | 5 Jun 2019 | CVSS 9.8 | Exim Mail Transfer Agent (MTA) Improper Input ValidationA flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c… | ExploitedFix |
| CVE-2019-10149 | 5 Jun 2019 | CVSS 9.8 | Exim Mail Transfer Agent (MTA) Improper Input ValidationA flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c… | ExploitedFix |
| CVE-2018-6789 | 8 Feb 2018 | CVSS 9.8 | Exim Buffer OverflowAn issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may… | ExploitedFix |
| CVE-2010-4344 | 14 Dec 2010 | CVSS 9.8 | Exim Heap-Based Buffer OverflowHeap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an… | ExploitedFix |
| CVE-2010-4345 | 14 Dec 2010 | CVSS 7.8 | Exim Privilege EscalationExim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration… | ExploitedFix |