Описание
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 4.90.1-1ubuntu1.2 |
| cosmic | released | 4.91-6ubuntu1.1 |
| devel | not-affected | 4.92-7ubuntu1 |
| disco | not-affected | 4.92-4ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 4.82-3ubuntu2.4 |
| esm-infra/bionic | released | 4.90.1-1ubuntu1.2 |
| esm-infra/xenial | not-affected | 4.86.2-2ubuntu2.3 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | not-affected | 4.82-3ubuntu2.4 |
Показывать по
EPSS
10 Critical
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper v ...
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
EPSS
10 Critical
CVSS2
9.8 Critical
CVSS3