Lucene search

MitreCVELIST:CVE-2020-28020

HistoryMay 06, 2021 - 4:10 a.m.

CVE-2020-28020

2021-05-0604:10:36

mitre

www.cve.org

cve-2020-28020

exim

integer overflow

buffer overflow

remote attacker

arbitrary code

continuation lines

header-length restriction

AI Score

9.7

Confidence

High

EPSS

0.031

Percentile

91.2%

JSON

Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.

References

www.openwall.com/lists/oss-security/2021/07/25/1

www.openwall.com/lists/oss-security/2021/08/03/1

www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28020-HSIZE.txt