Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 has an improper neutralization of line delimiters. Local users can alter the behavior of root processes because a recipient address may contain a newline character...

Astra Linux – Vulnerability in exim4

Exim before version 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set...

Astra Linux – vulnerability in exim4

Exim 4 prior to version 4.94.2 allows integer overflow leading to a buffer overflow in receiveaddrecipient when processing an email message with fifty million recipients. NOTE: Remote exploitation may be difficult due to resource consumption...

Astra Linux – vulnerability in exim4

Exim 4 prior to version 4.94.2 suffers from improper neutralization of line delimiters; this issue is relevant in non-default configurations that enable Delivery Status Notification DSN. Certain usage patterns involving ORCPT= can insert a newline into a spool header file, thereby indirectly...

Astra Linux – vulnerability in exim4

Exim 4 prior to version 4.94.2 contains improper initialization that may result in stack consumption due to recursion or other issues. This happens because the use of certain getc functions is mishandled when a client specifies BDAT instead of DATA...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allowed Buffer Underwrite, which could allow unauthenticated remote attackers to execute arbitrary commands. This is because smtpungetc was only intended for pushing back characters, but it can actually be used to push back non-character error codes, such as EOF...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 has an improper restriction on write operations within the bounds of a memory buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...

Astra Linux – vulnerability in exim4

Exim 4 prior to version 4.94.2 allows execution with unnecessary privileges. Since Exim runs as root in the log directory which is owned by a non-root user, a symlink or hard link attack can overwrite critical files owned by root at any location on the filesystem...

Astra Linux – Vulnerability in exim4

Exim 4.98 before 4.98.1 allowed remote SQL injection when SQLite hints and ETRN serialization were used. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allowed out-of-bounds read vulnerabilities. The smtpsetupmsg function may disclose sensitive information from the process memory to an unauthenticated SMTP client...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to the leakage of sensitive information from process memory...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows Heap-based Buffer Overflows because it mishandles the "-F’.‘” syntax on the command line. This may allow privilege escalation from any user to root. This issue occurs due to the incorrect interpretation of negative sizes in the strncpy function...

Astra Linux – Vulnerability in exim4

A vulnerability was discovered in Exim and has been classified as problematic. This issue affects certain aspects of the component Regex Handler’s processing. The vulnerability results in memory leaks after the component is freed from memory. The name of the patch is...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allowed a heap-based buffer overflow in the queuerun function, through two sender options: -R and -S. This could lead to privilege escalation from the exim user to the root user...

Exploit for Use After Free in Exim

CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root...

SUSE CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

SUSE CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

Fedora 43 : exim (2026-d6839a7c95)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d6839a7c95 advisory. This is new version fixing command execution with alternate privilege. Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 44 : exim (2026-94678c4b6e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-94678c4b6e advisory. This is new version fixing command execution with alternate privilege. Tenable has extracted the preceding description block directly from the Fedora securit...

ROS-20260729-73-0013

The vulnerability in exim is related to errors in the representation of specified functions. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...