Поиск уязвимостей
Количество 24
Количество 24
ALT-PU-2019-4213
ALT-PU-2019-4213: package `exim` update to version 4.92.0.1-alt1
CVE-2019-10149
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
CVE-2019-10149
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
CVE-2019-10149
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
CVE-2019-10149
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper v ...
openSUSE-SU-2019:1524-1
Security update exim
GHSA-5r7w-xvrp-rg22
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
BDU:2019-02827
Уязвимость функции deliver_message() (/src/deliver.c) почтового сервера Exim, позволяющая нарушителю выполнить произвольный код
CVE-2019-13917
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain).
CVE-2019-13917
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain).
CVE-2019-13917
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain).
CVE-2019-13917
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution ...
CVE-2020-28020
Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.
CVE-2020-28020
Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.
CVE-2020-28020
Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in whic ...
GHSA-w2fj-xv79-84gh
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain).
BDU:2019-02878
Уязвимость почтового сервера Exim, связанная с ошибками обработки объектов в памяти позволяющая нарушителю повысить свои привилегии и выполнить произвольный код
GHSA-p795-3xjq-48vx
Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.
BDU:2021-02764
Уязвимость функции receive_msg() агента пересылки сообщений Exim, связанная с целочисленным переполнением, позволяющая нарушителю выполнить произвольный код
BDU:2021-02769
Уязвимость функции pdkim_finish_bodyhash() агента пересылки сообщений Exim, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить доступ конфиденциальной информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2019-4213 ALT-PU-2019-4213: package `exim` update to version 4.92.0.1-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
 | CVE-2019-10149 A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. | CVSS3: 9.8 | 100% Критический | больше 7 лет назад |
 | CVE-2019-10149 A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. | CVSS3: 9 | 100% Критический | больше 7 лет назад |
 | CVE-2019-10149 A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. | CVSS3: 9.8 | 100% Критический | больше 7 лет назад |
| CVE-2019-10149 A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper v ... | CVSS3: 9.8 | 100% Критический | больше 7 лет назад |
 | openSUSE-SU-2019:1524-1 Security update exim | 100% Критический | больше 7 лет назад | |
| GHSA-5r7w-xvrp-rg22 A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. | CVSS3: 9.8 | 100% Критический | больше 4 лет назад |
 | BDU:2019-02827 Уязвимость функции deliver_message() (/src/deliver.c) почтового сервера Exim, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 100% Критический | больше 7 лет назад |
| CVE-2019-13917 Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain). | CVSS3: 9.8 | 9% Низкий | больше 7 лет назад |
| CVE-2019-13917 Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain). | CVSS3: 8.1 | 9% Низкий | больше 7 лет назад |
| CVE-2019-13917 Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain). | CVSS3: 9.8 | 9% Низкий | больше 7 лет назад |
| CVE-2019-13917 Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution ... | CVSS3: 9.8 | 9% Низкий | больше 7 лет назад |
| CVE-2020-28020 Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction. | CVSS3: 9.8 | 8% Низкий | больше 5 лет назад |
| CVE-2020-28020 Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction. | CVSS3: 9.8 | 8% Низкий | больше 5 лет назад |
| CVE-2020-28020 Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in whic ... | CVSS3: 9.8 | 8% Низкий | больше 5 лет назад |
| GHSA-w2fj-xv79-84gh Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain). | CVSS3: 9.8 | 9% Низкий | больше 4 лет назад |
| BDU:2019-02878 Уязвимость почтового сервера Exim, связанная с ошибками обработки объектов в памяти позволяющая нарушителю повысить свои привилегии и выполнить произвольный код | CVSS3: 9.8 | 9% Низкий | больше 7 лет назад |
| GHSA-p795-3xjq-48vx Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction. | CVSS3: 9.8 | 8% Низкий | больше 4 лет назад |
| BDU:2021-02764 Уязвимость функции receive_msg() агента пересылки сообщений Exim, связанная с целочисленным переполнением, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 8% Низкий | около 6 лет назад |
| BDU:2021-02769 Уязвимость функции pdkim_finish_bodyhash() агента пересылки сообщений Exim, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить доступ конфиденциальной информации | CVSS3: 7.5 | 3% Низкий | около 6 лет назад |
Уязвимостей на страницу