2281 matches found
CLSA-2022-1661445629 Fixed CVE-2022-37451 in exim
CVE-2022-37451: fix invalid free in pamconverse...
CLSA-2022-1661445415 Fixed CVE-2022-37451 in exim
CVE-2022-37451: fix invalid free in pamconverse...
Exim < 4.96 DoS
According to its banner, the version of Exim running on the remote host is prior to 4.96. It is, therefore, potentially affected by an invalid free error which can be exploited by a remote, unauthenticated attacker. Successful exploitation may result in a denial of service. This vulnerability...
CLSA-2022-1661173443 Fix CVE(s): CVE-2022-37452, CVE-2022-37451
SECURITY UPDATE: exim heap overflow in hostnamelookup - debian/patches/CVE-2022-37452.patch: fix hostnamelookup - CVE-2022-37452 SECURITY UPDATE: invalid free in pamconverse in auths/callpam.c - debian/patches/CVE-2022-37451.patch: fix PAM auth - CVE-2022-37451...
USN-5574-1: Exim vulnerability
It was discovered that Exim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code...
USN-5574-1 exim4 vulnerability
It was discovered that Exim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Exim vulnerability (USN-5574-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5574-1 advisory. It was discovered that Exim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute...
Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452
CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...
CLSA-2022-1660761670 Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452
CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...
CLSA-2022-1660759272 Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452
CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...
Denial Of Service (DoS)
exim is vulnerable to denial of service. The vulnerability exists due to an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...
Unspecified Vulnerability in Exim (CNVD-2022-56952)
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim versions prior to 4.95, which stems from a heap-based buffer overflow in the alias list in hostnamelookup when senderhostname is set. No details of t...
The vulnerability of the host_name_lookup function in the Exim mail server allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hostnamelookup function host.c in the Exim mail server is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the pam_converse function (auths/call_pam.c) in the Exim mail server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pamconverse function auths/callpam.c in the Exim mail server relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Exim < 4.96 Invalid Free Vulnerability
Exim is prone to an invalid free vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if description...
Exim < 4.95 Buffer Overflow Vulnerability
Exim is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...
CVE-2022-37452
Exim before 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set...
CVE-2022-37452
Exim before 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set...
