Описание
Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 4.90.1-1ubuntu1.9 |
| devel | not-affected | |
| esm-infra-legacy/trusty | released | 4.82-3ubuntu2.4+esm4 |
| esm-infra-legacy/xenial | released | 4.86.2-2ubuntu2.6+esm2 |
| esm-infra/bionic | released | 4.90.1-1ubuntu1.9 |
| esm-infra/focal | released | 4.93-13ubuntu1.6 |
| esm-infra/xenial | released | 4.86.2-2ubuntu2.6+esm2 |
| focal | released | 4.93-13ubuntu1.6 |
| jammy | not-affected | 4.95-4ubuntu2.1 |
| kinetic | not-affected |
Показывать по
EPSS
9.8 Critical
CVSS3
Связанные уязвимости
Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
Exim before 4.95 has a heap-based buffer overflow for the alias list i ...
Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
Уязвимость функции host_name_lookup (host.c) почтового сервера Exim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ALT-PU-2023-4920: package `exim` update to version 4.96-alt1
EPSS
9.8 Critical
CVSS3