Fedora: Security Advisory for exim (FEDORA-2021-89cb264e4d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for exim (FEDORA-2021-89cb264e4d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for exim (FEDORA-2021-5697574fd1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: exim-4.94-2.fc32

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

[SECURITY] Fedora 33 Update: exim-4.94-7.fc33

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 34 Update: exim-4.94-7.fc34

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

Exim Input Validation Error Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. An input validation error vulnerability exists in Exim versions 4.87 through 4.91. The vulnerability stems from a network system or product that does not properly validate incoming data. No...

PT-2020-6045

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to improper neutralization of line delimiters in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool...

PT-2020-6049

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to the Exim message transfer agent and involves a problem with symbolic link tracking. An attacker can exploit this by creating a specially crafted symbolic link to a file and...

PT-2020-6048

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to the smtp ungetc function in the Exim mail transfer agent, which is vulnerable to buffer underwrite. This vulnerability may allow unauthenticated remote attackers to execute...

PT-2020-6041

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to an integer overflow to buffer overflow in the get stdinput function, allowing unbounded reads accompanied by unbounded increases in a certain size variable. This could potential...

PT-2020-6051

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to an integer overflow to buffer overflow in the receive add recipient function via an e-mail message with a large number of recipients, potentially allowing remote execution of...

PT-2020-6035

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to improper initialization that can lead to recursion-based stack consumption or other consequences. This occurs because the use of certain getc functions is mishandled when a clie...

PT-2020-6046

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.92 Description The issue is related to an integer overflow to buffer overflow, where an unauthenticated remote attacker can execute arbitrary code. This is due to the mishandling of continuation lines during...

PT-2020-6040

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to a security mechanism flaw in the Exim message transfer agent. It allows exposure of a file descriptor to an unintended control sphere due to a privileged pipe lacking a...

PT-2020-6043

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to an out-of-bounds read in the smtp setup msg function of the Exim mail transfer agent. This can potentially disclose sensitive information from process memory to an unauthenticat...

PT-2020-6038

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is caused by a heap-based buffer overflow due to the mishandling of negative sizes in strncpy, potentially allowing privilege escalation from any user to root. This occurs because of the...

PT-2020-6037

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to a Heap-based Buffer Overflow in the queue run function of the Exim mail transfer agent. This overflow can be triggered via two sender options: -R and -S. The exploitation of thi...