CVE-2020-28018

Опубликовано: 06 мая 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Высокий

Описание

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

Ссылки

http://www.openwall.com/lists/oss-security/2021/05/11/14
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/15
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/17
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/12/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/12/3
Mailing List
Third Party Advisory
https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28018-OCORK.txt
Vendor Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/14
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/15
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/17
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/12/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/12/3
Mailing List
Third Party Advisory
https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28018-OCORK.txt
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*

Версия от 4.90 (включая) до 4.94.2 (исключая)

EPSS

Процентиль: 99%

0.76126

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2020-28018

CVSS3: 9.8

ubuntu

почти 5 лет назад

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

CVE-2020-28018

CVSS3: 9.8

debian

почти 5 лет назад

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain si ...

GHSA-5hqr-vx33-mfmh

github

больше 3 лет назад

Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

BDU:2021-02766

CVSS3: 9.8

fstec

почти 5 лет назад

Уязвимость компонента tls-openssl.c агента пересылки сообщений Exim, связанная с использованием памяти после ее освобождения, позволяющая нарушителю повысить привилегии в системе и выполнить произвольный код

openSUSE-SU-2021:0677-1

suse-cvrf

почти 5 лет назад

Security update for exim

EPSS

Процентиль: 99%

0.76126

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416