Lucene search

K
cvelistMitreCVELIST:CVE-2020-28013
HistoryMay 06, 2021 - 3:39 a.m.

CVE-2020-28013

2021-05-0603:39:35
mitre
www.cve.org
6
exim 4.94.2
heap-based buffer overflow
command line
privilege escalation
negative sizes
strncpy

AI Score

8.9

Confidence

High

EPSS

0

Percentile

12.6%

Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles “-F ‘.(’” on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy.