Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-40685

Опубликовано: 30 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.5

Описание

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.

РелизСтатусПримечание
devel

released

4.99.1-1ubuntu2
esm-infra-legacy/trusty

ignored

changes too intrusive
esm-infra-legacy/xenial

ignored

changes too intrusive
esm-infra/bionic

ignored

changes too intrusive
esm-infra/focal

released

4.93-13ubuntu1.12+esm1
esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

released

4.95-4ubuntu2.7
noble

released

4.97-4ubuntu4.4
questing

released

4.98.2-1ubuntu2.1
resolute

released

4.99.1-1ubuntu1.1

Показывать по

EPSS

Процентиль: 25%
0.00321
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
4 месяца назад

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.

CVSS3: 6.5
debian
4 месяца назад

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds h ...

CVSS3: 9.8
redos
20 дней назад

Уязвимость exim

CVSS3: 6.5
github
4 месяца назад

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.

EPSS

Процентиль: 25%
0.00321
Низкий

6.5 Medium

CVSS3