Advisory ROSA-SA-2026-3248

software: exim 4.99.1 OS: ROSA-CHROME unaffected versions = exim-4.99.1-1 affected versions exim-4.99.1-1 CVE-ID: CVE-2025-67896 BDU-ID: 2026-00906 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the Exim mail server is related to a buffer overflow in dynamic memory. Exploitation of the...

Fedora: Security Advisory (FEDORA-2026-aab8eaa2e3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-67896

creationtimestamp| type| source ---|---|--- 2025-12-14 10:11:11+00:00| seen| https://seclists.org/oss-sec/2025/q4/275 2025-12-18 20:07:27+00:00| seen| https://seclists.org/oss-sec/2025/q4/287 2025-12-18 21:31:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mac4rptraz2z...

CVE-2025-67896

Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly to internal structures without validation...