CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 is vulnerable to an invalid free in pam_converse (auths/call_pam.c) because store_free is not used after store_malloc. The flaw is memory-management related and, per sources, can lead to denial of service. Affected product: Exim MTA; root cause: missing deallocation after allocat...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

PT-2022-3997 · Exim +1 · Exim +1

Name of the Vulnerable Software and Affected Versions: Exim versions prior to 4.96 Description: The issue is related to the use of memory after it has been freed in the pam converse function of the Exim mail server. This can be exploited by a remote attacker to impact the confidentiality,...

Exim 安全漏洞

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim versions prior to 4.96, which stems from an invalid free in pamconverse in auths/callpam.c. The vulnerability is caused by the use of an invalid free...

Amazon Linux AMI : exim (ALAS-2022-1622)

The version of exim installed on the remote host is prior to 4.92-1.33. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1622 advisory. Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory owned ...

Critical: exim

Issue Overview: Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory owned by a non-root user, a symlink or hard link attack allows overwriting critical root-owned files anywhere on the filesystem. CVE-2020-28007 Exim 4 before 4.94....

PT-2022-6994

Name of the Vulnerable Software and Affected Versions Exim affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this issue. The specific flaw exists within the smtp...

PT-2022-6996 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue is related to an out-of-bounds read in the Exim smtp service, which can allow network-adjacent attackers to disclose sensitive information on affected installations of Exim. The...

PT-2022-6998 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim versions prior to 4.97.1 Exim versions 4.94.2-7+deb11u1 through 4.96-15+deb12u2 Exim versions prior to 4.92-8+deb10u8 Exim versions prior to 4.96.1-1.1 Description: Exim is vulnerable to multiple issues, including a stack-based buffer...

PT-2022-6995

Name of the Vulnerable Software and Affected Versions Exim libspf2 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. The flaw exists within the parsing of SPF macros, where the process does...

PT-2022-6997 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue is related to the handling of NTLM challenge requests in Exim, which can result in a read past the end of an allocated data structure due to the lack of proper validation of...

Exim Remote Code Execution (CVE-2010-4345)

A remote code execution vulnerability exists in Exim. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Exim Privilege Escalation Vulnerability

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands...

Exim Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in the stringvformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session...

CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA this week added 95 more security flaws to its Known Exploited Vulnerabilities Catalog, taking the total number of actively exploited vulnerabilities to 478. "These types of vulnerabilities are a frequent attack vector for malicious...

VulnCheck KEV: CVE-2019-16928

Exim contains an out-of-bounds write vulnerability which can allow for remote code execution...

Exim Out-of-bounds Write Vulnerability

Exim contains an out-of-bounds write vulnerability which can allow for remote code execution...

Exim Use After Free (CVE-2020-28018)

A use after free vulnerability exists in Exim. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...