Описание
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 4.90.1-1ubuntu1.5 |
| devel | not-affected | 4.94-2ubuntu1 |
| eoan | released | 4.92.1-1ubuntu3.1 |
| esm-infra-legacy/trusty | released | 4.82-3ubuntu2.4+esm2 |
| esm-infra/bionic | released | 4.90.1-1ubuntu1.5 |
| esm-infra/focal | released | 4.93-13ubuntu1.1 |
| esm-infra/xenial | released | 4.86.2-2ubuntu2.6 |
| focal | released | 4.93-13ubuntu1.1 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
Exim through 4.93 has an out-of-bounds read in the SPA authenticator t ...
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
Уязвимость компонентов auths/spa.c и auths/auth-spa.c почтового сервера Exim, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS
5 Medium
CVSS2
7.5 High
CVSS3