3 matches found
exim: Fix of 2 CVEs
CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...
8.4CVSS5.9AI score0.00386EPSS
SaveExploits0References2
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
10CVSS0.08622EPSS
SaveExploits0References8
CVE-2019-13917: Undefined Security Weakness
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
10CVSS8.4AI score0.08622EPSS
SaveExploits0References2
20