The vulnerability of the Exim message transfer agent, related to resource management errors, allows a attacker to perform denial-of-service attacks.

The vulnerability of the Exim message transfer agent is related to resource management errors. Exploiting this vulnerability allows a malicious actor to perform a Denial-of-Service attack by sending specially crafted data to the application...

The vulnerability of the spool_read_header() function in the Exim message transport agent allows attackers to bypass security restrictions due to insufficient input validation.

The vulnerability of the spoolreadheader function in the Exim mail agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions remotely...

The vulnerability of the tls-openssl.c component of the Exim message relay agent allows an attacker to elevate their privileges within the system and execute arbitrary code. This vulnerability stems from the way memory is managed after it is freed.

The vulnerability of the tls-openssl.c component of the Exim message transfer agent allows for privilege escalation within the system by exploiting memory reclamation after it is released. This enables attackers to execute arbitrary code by sending a specially crafted request...

The vulnerability of the pdkim_finish_bodyhash() function in the Exim message transport agent, related to reading beyond the buffer in memory, allows an attacker to access confidential information.

The vulnerability of the pdkimfinishbodyhash function in the Exim message transport agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability of the extractoption() function in the Exim message forwarding agent, related to writing beyond the buffer size in memory, allows a hacker to execute arbitrary code.

The vulnerability of the extractoption function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted message to the mail server...

The vulnerability of the smtp_ungetc() function in the Exim message transport agent, related to integer overflows, allows attackers to execute arbitrary code.

The vulnerability of the smtpungetc function in the Exim message delivery agent is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted request to the server...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate privileges within the system by sending the file’s PID...

The vulnerability of the parse_fix_frase() function in the Exim message forwarding agent, related to buffer overflows in the “queue”, allows an attacker to elevate their privileges within the system and execute arbitrary code.

The vulnerability of the parsefixphrase function in the Exim message forwarding agent is caused by an overflow in the buffer in the “queue”. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

The vulnerability of the parse_fix_phrase() function in the Exim message forwarding agent, related to writing beyond buffer boundaries in memory, allows a hacker to elevate their privileges in the system and execute arbitrary code.

The vulnerability of the parsefixfrase function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an intruder with privileges in the system to execute arbitrary code...

The vulnerability of the get_stdinput() function in the Exim message forwarding agent, related to integer overflow, allows an attacker to escalate privileges or execute arbitrary code.

The vulnerability of the getstdinput function in the Exim message forwarding agent is related to integer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

The vulnerability of the receive_msg() function in the Exim message forwarding agent, related to integer overflows, allows attackers to execute arbitrary code.

The vulnerability of the receivemsg function in the Exim message forwarding agent is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the main() function in the Exim message forwarding agent lies in the fact that it allows writing beyond the buffer boundaries in memory. This enables a hacker to increase their privileges within the system and execute arbitrary code.

The vulnerability of the main function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

The vulnerability of the Exim message transfer agent, related to insufficient input data validation, allows attackers to circumvent security restrictions.

The vulnerability of the Exim message transfer agent is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass security restrictions and execute arbitrary commands...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to delete any files in the system at will.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files from the system...

OPENSUSE-SU-2021:0754-1 Security update for exim

This update for exim fixes the following issues: Exim was updated to exim-4.94.2 security update boo1185631 CVE-2020-28007: Link attack in Exim's log directory CVE-2020-28008: Assorted attacks in Exim's spool directory CVE-2020-28014: Arbitrary PID file creation CVE-2020-28011: Heap buffer overfl...

OPENSUSE-SU-2021:0753-1 Security update for exim

This update for exim fixes the following issues: exim was updated to 4.94.2: security update boo1185631 CVE-2020-28007: Link attack in Exim's log directory CVE-2020-28008: Assorted attacks in Exim's spool directory CVE-2020-28014: Arbitrary PID file creation CVE-2020-28011: Heap buffer overflow i...

Security update for exim (critical)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2021:0753-1 Rating: critical References: 1079832 1136587 1142207 1154183 1160726 1171490 1171877 1173693 1185631 Cross-References: CVE-2017-1000369 CVE-2017-16943 CVE-2017-16944 CVE-2018-6789 CVE-2019-10149...

Security update for exim (critical)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2021:0754-1 Rating: critical References: 1079832 1171490 1171877 1173693 1185631 Cross-References: CVE-2017-1000369 CVE-2017-16943 CVE-2017-16944 CVE-2018-6789 CVE-2019-16928 CVE-2020-12783 CVE-2020-28007 CVE-2020-280...

openSUSE Security Update : exim (openSUSE-2021-677) (Stack Clash)

This update for exim fixes the following issues : Exim was updated to exim-4.94.2 security update boo1185631 - CVE-2020-28007: Link attack in Exim's log directory - CVE-2020-28008: Assorted attacks in Exim's spool directory - CVE-2020-28014: Arbitrary PID file creation - CVE-2020-28011: Heap buff...

Exim 4 远程代码执行漏洞（CVE-2020-28018）

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: - x Memory Leakage - x...