2626 matches found
Astra Linux – Vulnerability in exim4
Before version 4.97.1, Exim allowed SMTP smuggling in certain pipeline/chunking configurations. Remote attackers could use a known exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, thereby bypassing an SPF protection mechanism. This issue arises because Exim...
Astra Linux – Vulnerability in exim4
In Exim before 4.99.2, when utf8 operators are enabled, there is a potential for out-of-bounds reading if large UTF-8 trailing characters are present malformed UTF-8 header data. Information may be disclosed within an error message generated during the processing of an unrelated email message...
Astra Linux – Vulnerability in exim4
In versions of Exim prior to 4.99.3, and under certain GnuTLS configurations, there is a remotely reachable use-after-free in the BDAT body parsing path. This issue is triggered when a client sends a TLS closenotify message during a CHUNKING transfer, followed by a final cleartext byte on the sam...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 allowed Use After Free in smtpreset in certain situations that might be common in builds using OpenSSL...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 allowed a heap-based buffer overflow in the queuerun function, through two sender options: -R and -S. This could lead to privilege escalation from the exim user to the root user...
Astra Linux – Vulnerability in exim4
In Exim 4.88 before 4.99.4, certain short payloads were handled improperly in some proxy configurations, resulting in uninitialized stack memory values being disclosed to clients...
Astra Linux – Vulnerability in exim4
A vulnerability was discovered in Exim and has been classified as problematic. This issue affects certain aspects of the component Regex Handler’s processing. The vulnerability results in memory leaks after the component is freed from memory. The name of the patch is...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 allows out-of-bounds write-ups, because the main function, while having setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper neutralization of line delimiters. An authenticated remote SMTP client can insert newline characters into a spool file which indirectly leads to remote code execution as root via the AUTH= parameter in the MAIL FROM command...
The vulnerability of the dn_expand() function in the Exim mail server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the dnexpand function in the Exim mail server is related to errors in the representation of certain functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Exim mail server, related to errors in representing specified functions, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Exim mail server is related to errors in representing certain functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-66141
A flaw was found in Exim. This vulnerability allows a local attacker to achieve privilege escalation due to the mishandling of forcecommand for a pipe transport when processing .forward files. This could enable an unprivileged user to gain elevated access on the system. Mitigation Upgrade to Exim...
The vulnerability of the PROXY protocol parser of the Exim mail server allows a hacker to cause a service failure.
The vulnerability of the PROXY protocol parser of the Exim mail server is related to the lack of checks for verifying that the value is within the minimum range. Exploiting this vulnerability could allow a malicious actor to cause service failures...
exim: Fix of 2 CVEs
CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...
CVE-2026-40684 vulnerabilities
Vulnerabilities for packages: exim...
CVE-2026-40686 vulnerabilities
Vulnerabilities for packages: exim...
CVE-2026-40687 vulnerabilities
Vulnerabilities for packages: exim...
CVE-2026-66140 vulnerabilities
Vulnerabilities for packages: exim...