Medium: exim

Issue Overview: Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc. CVE-2022-37451 Affected Packages: exim Issue Correction: Run yum update exim or yum update --advisory ALAS-2023-1753 to update your system. New Packages: i686: ...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CLSA-2022-1661445629 Fixed CVE-2022-37451 in exim

CVE-2022-37451: fix invalid free in pamconverse...

Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452

CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...

Denial Of Service (DoS)

exim is vulnerable to denial of service. The vulnerability exists due to an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

The vulnerability of the pam_converse function (auths/call_pam.c) in the Exim mail server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pamconverse function auths/callpam.c in the Exim mail server relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

Design/Logic Flaw

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

UBUNTU-CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...