Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-40686

Опубликовано: 30 апр. 2026
Источник: ubuntu
Приоритет: medium
CVSS3: 3.7

Описание

In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information might be divulged within an error message produced during handling of an unrelated e-mail message.

РелизСтатусПримечание
devel

released

4.99.1-1ubuntu2
esm-infra-legacy/trusty

ignored

changes too intrusive
esm-infra-legacy/xenial

ignored

changes too intrusive
esm-infra/bionic

ignored

changes too intrusive
esm-infra/focal

released

4.93-13ubuntu1.12+esm1
esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

released

4.95-4ubuntu2.7
noble

released

4.97-4ubuntu4.4
questing

released

4.98.2-1ubuntu2.1
resolute

released

4.99.1-1ubuntu1.1

Показывать по

3.7 Low

CVSS3

Связанные уязвимости

CVSS3: 3.7
nvd
3 месяца назад

In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information might be divulged within an error message produced during handling of an unrelated e-mail message.

CVSS3: 3.7
debian
3 месяца назад

In Exim before 4.99.2, when utf8 operators are enabled, there is an ou ...

CVSS3: 3.7
github
3 месяца назад

In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information might be divulged within an error message produced during handling of an unrelated e-mail message.

CVSS3: 5.3
fstec
4 месяца назад

Уязвимость почтового сервера Exim, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5.3
redos
6 дней назад

Уязвимость exim

3.7 Low

CVSS3