CVE-2020-28026

2021-05-0400:00:00

ubuntu.com

0.009 Low

EPSS

Percentile

82.9%

JSON

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters,
relevant in non-default configurations that enable Delivery Status
Notification (DSN). Certain uses of ORCPT= can place a newline into a spool
header file, and indirectly allow unauthenticated remote attackers to
execute arbitrary commands as root.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchexim4< 4.90.1-1ubuntu1.8UNKNOWN
ubuntu20.04noarchexim4< 4.93-13ubuntu1.5UNKNOWN
ubuntu20.10noarchexim4< 4.94-7ubuntu1.2UNKNOWN
ubuntu21.04noarchexim4< 4.94-15ubuntu1.2UNKNOWN
ubuntu21.10noarchexim4< 4.94-15ubuntu1.2UNKNOWN
ubuntu22.04noarchexim4< 4.94-15ubuntu1.2UNKNOWN
ubuntu14.04noarchexim4< 4.82-3ubuntu2.4+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchexim4< 4.86.2-2ubuntu2.6+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	exim4	< 4.90.1-1ubuntu1.8	UNKNOWN
ubuntu	20.04	noarch	exim4	< 4.93-13ubuntu1.5	UNKNOWN
ubuntu	20.10	noarch	exim4	< 4.94-7ubuntu1.2	UNKNOWN
ubuntu	21.04	noarch	exim4	< 4.94-15ubuntu1.2	UNKNOWN
ubuntu	21.10	noarch	exim4	< 4.94-15ubuntu1.2	UNKNOWN
ubuntu	22.04	noarch	exim4	< 4.94-15ubuntu1.2	UNKNOWN
ubuntu	14.04	noarch	exim4	< 4.82-3ubuntu2.4+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	exim4	< 4.86.2-2ubuntu2.6+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN