Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-40684

Опубликовано: 30 апр. 2026
Источник: nvd
CVSS3: 5.9
CVSS3: 7.5
EPSS Низкий

Описание

In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
Версия до 4.99.2 (исключая)

EPSS

Процентиль: 29%
0.00362
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-684

Связанные уязвимости

CVSS3: 5.9
ubuntu
4 месяца назад

In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.

CVSS3: 5.9
debian
4 месяца назад

In Exim before 4.99.2, on systems using musl libc (not glibc), an atta ...

CVSS3: 7.5
redos
20 дней назад

Уязвимость exim

CVSS3: 5.9
github
4 месяца назад

In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.

EPSS

Процентиль: 29%
0.00362
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-684