Описание
The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 4.96-14ubuntu1 |
| esm-infra-legacy/trusty | released | 4.82-3ubuntu2.4+esm8 |
| esm-infra-legacy/xenial | released | 4.86.2-2ubuntu2.6+esm7 |
| esm-infra/bionic | released | 4.90.1-1ubuntu1.10+esm4 |
| esm-infra/focal | released | 4.93-13ubuntu1.11 |
| esm-infra/xenial | released | 4.86.2-2ubuntu2.6+esm7 |
| focal | released | 4.93-13ubuntu1.11 |
| hirsute | ignored | end of life |
| impish | ignored | end of life |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.
The STARTTLS feature in Exim through 4.94.2 allows response injection ...
The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.
Уязвимость функционала STARTTLS почтового сервера Exim, связанная с недостаточной нейтрализацией специальных элементов в запросе, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2023-4920: package `exim` update to version 4.96-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3