USN-8590-1 exim4 vulnerabilities

It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue ...

Debian dla-4615 : exim4 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4615 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4615-1 [email protected] https://www.debian.org/lts/security/...

USN-8382-1 exim4 vulnerabilities

Timo Longin discovered that Exim incorrectly handled certain SMTP messages in PIPELINING/CHUNKING configurations. A remote attacker could possibly use this issue to perform SMTP smuggling. This issue only affected Ubuntu 14.04 LTS. CVE-2023-51766 It was discovered that Exim incorrectly handled...

Debian dsa-6309 : exim4 - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6309 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6309-1 [email protected] https://www.debian.org/security/...

[SECURITY] [DLA 4580-1] exim4 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4580-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 12, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6265-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6265-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 12, 2026 https://www.debian.org/security/faq -...

Debian dla-4580 : exim4 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4580 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4580-1 [email protected] https://www.debian.org/lts/security/...

Linux Distros Unpatched Vulnerability : CVE-2026-40684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-40685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header,...

Linux Distros Unpatched Vulnerability : CVE-2026-40686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present malformed UTF-8 header dat...

Linux Distros Unpatched Vulnerability : CVE-2026-40687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the...

Debian: Security Advisory (DSA-5887-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7373-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5887-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5887-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 26, 2025 https://www.debian.org/security/faq -...

DSA-5887-1 exim4 - security update

Bulletin has no description...

Debian dsa-5887 : exim4 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5887 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5887-1 [email protected] https://www.debian.org/security/...

Debian dla-3708 : exim4 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3708 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3708-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3938-1] exim4 security update

Debian LTS Advisory DLA-3938-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 29, 2024 https://wiki.debian.org/LTS Package : exim4 Version : 4.94.2-7+deb11u4 CVE ID : CVE-2021-38371 CVE-2022-3559 CVE-2023-42117 CVE-2023-42119 Debian Bug : 992172 Multiple...

Debian dla-3938 : exim4 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3938 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3938-1 [email protected]...

Debian: Security Advisory (DLA-3938-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...