CVE-2026-48840

Опубликовано: 30 мая 2026

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

Ссылки

https://exim.org/static/doc/security/EXIM-Security-2026-05-19.1
Vendor Advisory
https://www.openwall.com/lists/oss-security/2026/05/29/3
Mailing List
Mitigation
Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/05/29/3
Mailing List
Mitigation
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2026/06/msg00004.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*

Версия от 4.88 (включая) до 4.99.4 (исключая)

EPSS

Процентиль: 18%

0.00264

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-839

Связанные уязвимости

CVE-2026-48840

CVSS3: 5.3

ubuntu

2 месяца назад

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

CVE-2026-48840

CVSS3: 5.3

debian

2 месяца назад

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles cert ...

GHSA-wgrp-2w9f-fmvg

CVSS3: 5.3

github

2 месяца назад

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

EPSS

Процентиль: 18%

0.00264

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-839