2249 matches found
CVE-2020-28014
Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten...
CVE-2020-28019
Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...
CVE-2020-28011
Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queuerun via two sender options: -R and -S. This may cause privilege escalation from exim to root...
CVE-2020-28022
Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...
CVE-2019-19920
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval rather than direct parsing and/or use of the taint feature. This issue is similar to CVE-2018-11805...
CVE-2019-14404
cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...
CVE-2019-14388
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
CVE-2018-20936
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...
The vulnerability of the Exim mail server, related to the use of memory after it is freed, allows attackers to increase their privileges.
The vulnerability of the Exim mail server is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20250417-07
Exim mail server vulnerability is related to memory usage after memory is freed. Exploitation of the vulnerability could allow an attacker to escalate his privileges...
[SECURITY] Fedora 42 Update: exim-4.98.2-1.fc42
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
Exim Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Exim. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the dp command...
Fedora: Security Advisory (FEDORA-2025-3a56fe6159)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: exim-4.98.2-1.fc40
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
[SECURITY] Fedora 41 Update: exim-4.98.2-1.fc41
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
Fedora 40 : exim (2025-3a56fe6159)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3a56fe6159 advisory. This is an update fixing CVE 2025-30232. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora 41 : exim (2025-ab7148736c)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ab7148736c advisory. This is an update fixing CVE 2025-30232. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
ROS-20250403-03
Vulnerability of SQLite hints and ETRN serialization functions of Exim mail server is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sendi...
exim-4.98.2-1.1 on GA media (moderate)
exim-4.98.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14935-1 Rating: moderate Cross-References: CVE-2025-26794 CVE-2025-30232 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...
