USN-8270-1
exim4 vulnerability
No scoreFix available
It was discovered that Exim incorrectly handled BDAT body parsing. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
What each source reports
OSV No score
exim4 vulnerability
It was discovered that Exim incorrectly handled BDAT body parsing. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-8270-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exim4Ubuntu:22.04:LTS |
before 4.95-4ubuntu2.8, plus listed versions 4.94.2-7ubuntu24.95-2ubuntu24.95-4ubuntu14.95-4ubuntu24.95-4ubuntu2.1 Show 6 moreShow less4.95-4ubuntu2.24.95-4ubuntu2.34.95-4ubuntu2.44.95-4ubuntu2.54.95-4ubuntu2.64.95-4ubuntu2.7 |
4.95-4ubuntu2.8 |
exim4Ubuntu:24.04:LTS |
before 4.97-4ubuntu4.5, plus listed versions 4.96-17ubuntu24.96-17ubuntu2.14.97-3ubuntu14.97-4ubuntu14.97-4ubuntu3 Show 5 moreShow less4.97-4ubuntu44.97-4ubuntu4.14.97-4ubuntu4.24.97-4ubuntu4.34.97-4ubuntu4.4 |
4.97-4ubuntu4.5 |
exim4Ubuntu:25.10 |
before 4.98.2-1ubuntu2.2, plus listed versions 4.98.1-1ubuntu24.98.2-1ubuntu14.98.2-1ubuntu24.98.2-1ubuntu2.1 |
4.98.2-1ubuntu2.2 |
exim4Ubuntu:26.04:LTS |
before 4.99.1-1ubuntu1.2, plus listed versions 4.98.2-1ubuntu24.99-4ubuntu14.99.1-1ubuntu14.99.1-1ubuntu1.1 |
4.99.1-1ubuntu1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8270-1 is a vulnerability with no CVSS score yet in exim4, published May 12, 2026. No source lists public exploit code. Fixed in exim4 4.95-4ubuntu2.8.