btcpay.euroeximbank.com Cross Site Scripting vulnerability OBB-2880150

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-5379 · Exim +1 · Exim +1

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue affects the function dmarc dns lookup of the file dmarc.c of the component DMARC Handler. This is related to a use after free condition, which can be exploited by a remote attacker t...

PT-2022-5331 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: A vulnerability was found in Exim, affecting the Regex Handler component. This issue leads to use after free, potentially allowing a remote attacker to cause a denial of service or gain access...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

Debian dla-3082 : exim4 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3082 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3082-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu: Security Advisory (USN-4124-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2022-1661445629 Fixed CVE-2022-37451 in exim

CVE-2022-37451: fix invalid free in pamconverse...

CLSA-2022-1661445415 Fixed CVE-2022-37451 in exim

CVE-2022-37451: fix invalid free in pamconverse...

Exim < 4.96 DoS

According to its banner, the version of Exim running on the remote host is prior to 4.96. It is, therefore, potentially affected by an invalid free error which can be exploited by a remote, unauthenticated attacker. Successful exploitation may result in a denial of service. This vulnerability...

CLSA-2022-1661173443 Fix CVE(s): CVE-2022-37452, CVE-2022-37451

SECURITY UPDATE: exim heap overflow in hostnamelookup - debian/patches/CVE-2022-37452.patch: fix hostnamelookup - CVE-2022-37452 SECURITY UPDATE: invalid free in pamconverse in auths/callpam.c - debian/patches/CVE-2022-37451.patch: fix PAM auth - CVE-2022-37451...

USN-5574-1: Exim vulnerability

It was discovered that Exim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

USN-5574-1 exim4 vulnerability

It was discovered that Exim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Exim vulnerability (USN-5574-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5574-1 advisory. It was discovered that Exim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute...

Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452

CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...

CLSA-2022-1660761670 Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452

CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...

CLSA-2022-1660759272 Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452

CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...

Denial Of Service (DoS)

exim is vulnerable to denial of service. The vulnerability exists due to an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

Unspecified Vulnerability in Exim (CNVD-2022-56952)

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim versions prior to 4.95, which stems from a heap-based buffer overflow in the alias list in hostnamelookup when senderhostname is set. No details of t...

The vulnerability of the pam_converse function (auths/call_pam.c) in the Exim mail server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pamconverse function auths/callpam.c in the Exim mail server relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the host_name_lookup function in the Exim mail server allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hostnamelookup function host.c in the Exim mail server is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...