237 matches found
ROOT-OS-DEBIAN-12-CVE-2026-66140 CVE-2026-66140 in exim4 - Patched by Root
Root has patched CVE-2026-66140 in the exim4 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-66141 CVE-2026-66141 in exim4 - Patched by Root
Root has patched CVE-2026-66141 in the exim4 package for Root:Debian:12. Multiple fixed versions available...
Debian dsa-6400 : exim4 - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6400 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6400-1 [email protected] https://www.debian.org/securit...
[SECURITY] [DSA 6400-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6400-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 24, 2026 https://www.debian.org/security/faq -...
USN-8590-1 exim4 vulnerabilities
It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue ...
Debian dla-4615 : exim4 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4615 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4615-1 [email protected] https://www.debian.org/lts/security/...
USN-8382-1 exim4 vulnerabilities
Timo Longin discovered that Exim incorrectly handled certain SMTP messages in PIPELINING/CHUNKING configurations. A remote attacker could possibly use this issue to perform SMTP smuggling. This issue only affected Ubuntu 14.04 LTS. CVE-2023-51766 It was discovered that Exim incorrectly handled...
Debian dsa-6309 : exim4 - security update
The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6309 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6309-1 [email protected] https://www.debian.org/security/...
Astra Linux – Vulnerability in exim4
Exim: Improper Neutralization of Special Elements Leading to Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected Exim installations. Authentication is not required to exploit this vulnerability. The specific flaw resides within the...
Astra Linux – Vulnerability in exim4
Exim NTLM Challenge Out-of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected Exim installations. Authentication is not required to exploit this vulnerability. The specific flaw lies in the handling of NTLM...
Astra Linux – Vulnerability in exim4
Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected Exim installations. Authentication is not required to exploit this vulnerability. The specific flaw lies in the handling of NTLM...
Astra Linux – Vulnerability in exim4
The STARTTLS feature in Exim up to 4.94.2 allows for response injection buffering during MTA SMTP sending...
[SECURITY] [DLA 4580-1] exim4 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4580-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 12, 2026 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 6265-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6265-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 12, 2026 https://www.debian.org/security/faq -...
Debian dla-4580 : exim4 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4580 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4580-1 [email protected] https://www.debian.org/lts/security/...
Linux Distros Unpatched Vulnerability : CVE-2026-40687
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the...
Linux Distros Unpatched Vulnerability : CVE-2026-40686
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present malformed UTF-8 header dat...
Linux Distros Unpatched Vulnerability : CVE-2026-40685
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header,...
Linux Distros Unpatched Vulnerability : CVE-2026-40684
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. Th...