{"id":"CVE-2021-38371","aliases":["CLSA-2023-1687794906","CLSA-2023-1687795205","CLSA-2023-1687795531","CLSA-2023-1688070370","DEBIAN-CVE-2021-38371","DLA-3938-1","EUVD-2021-24824","GHSA-8gh2-336j-g8v7","UBUNTU-CVE-2021-38371","USN-6881-1"],"status":"published","title":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP...","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01996,"percentile":0.81,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-74"],"published":"2021-08-10T14:06:09Z","modified":"2026-10-24T10:30:18Z","fixes":[{"ecosystem":"TuxCare:CentOS:6","package":"exim","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"exim-greylist","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"exim-mon","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"exim-mysql","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"exim-pgsql","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"exim","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"exim-greylist","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"exim-mon","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"exim-mysql","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"exim-pgsql","fixed_in":["4.92.3-3.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-base","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-config","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-heavy","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-light","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-dev","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"eximon4","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-base","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-config","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-heavy","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-light","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-dev","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"eximon4","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"exim4","fixed_in":["4.95~RC2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exim4","fixed_in":["4.95~RC2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exim4","fixed_in":["4.95~RC2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","fixed_in":["4.82-3ubuntu2.4+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","fixed_in":["4.86.2-2ubuntu2.6+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"exim4","fixed_in":["4.90.1-1ubuntu1.10+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"exim4","fixed_in":["4.93-13ubuntu1.11"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-greylist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-greylist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-heavy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"eximon4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-heavy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"eximon4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95~RC2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95~RC2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95~RC2-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-7+deb11u4"}]}],"versions":["4.94.2-7","4.94.2-7+deb11u1","4.94.2-7+deb11u2","4.94.2-7+deb11u3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.82-3ubuntu2.4+esm8"}]}],"versions":["4.80-7ubuntu3","4.80-7ubuntu4","4.80-9ubuntu1","4.80-9ubuntu2","4.82-3ubuntu1","4.82-3ubuntu2","4.82-3ubuntu2.1","4.82-3ubuntu2.2","4.82-3ubuntu2.3","4.82-3ubuntu2.4","4.82-3ubuntu2.4+esm1","4.82-3ubuntu2.4+esm2","4.82-3ubuntu2.4+esm3","4.82-3ubuntu2.4+esm4","4.82-3ubuntu2.4+esm6","4.82-3ubuntu2.4+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+esm7"}]}],"versions":["4.86-3ubuntu1","4.86-7ubuntu1","4.86-7ubuntu2","4.86-7ubuntu3","4.86.2-2ubuntu1","4.86.2-2ubuntu2","4.86.2-2ubuntu2.1","4.86.2-2ubuntu2.2","4.86.2-2ubuntu2.3","4.86.2-2ubuntu2.4","4.86.2-2ubuntu2.5","4.86.2-2ubuntu2.6","4.86.2-2ubuntu2.6+esm1","4.86.2-2ubuntu2.6+esm2","4.86.2-2ubuntu2.6+esm4","4.86.2-2ubuntu2.6+esm5","4.86.2-2ubuntu2.6+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+esm4"}]}],"versions":["4.89-5ubuntu1","4.89-9ubuntu1","4.89-9ubuntu2","4.89-9ubuntu3","4.89-9ubuntu4","4.90.1-1ubuntu1","4.90.1-1ubuntu1.1","4.90.1-1ubuntu1.2","4.90.1-1ubuntu1.3","4.90.1-1ubuntu1.4","4.90.1-1ubuntu1.5","4.90.1-1ubuntu1.8","4.90.1-1ubuntu1.9","4.90.1-1ubuntu1.10","4.90.1-1ubuntu1.10+esm1","4.90.1-1ubuntu1.10+esm2","4.90.1-1ubuntu1.10+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.11"}]}],"versions":["4.92.1-1ubuntu3","4.92.1-1ubuntu4","4.93~RC2-1ubuntu1","4.93-9ubuntu1","4.93-11ubuntu1","4.93-12ubuntu1","4.93-13ubuntu1","4.93-13ubuntu1.1","4.93-13ubuntu1.5","4.93-13ubuntu1.6","4.93-13ubuntu1.7","4.93-13ubuntu1.8","4.93-13ubuntu1.9","4.93-13ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.82-3ubuntu2.4+esm8"}]}],"versions":["4.80-7ubuntu3","4.80-7ubuntu4","4.80-9ubuntu1","4.80-9ubuntu2","4.82-3ubuntu1","4.82-3ubuntu2","4.82-3ubuntu2.1","4.82-3ubuntu2.2","4.82-3ubuntu2.3","4.82-3ubuntu2.4","4.82-3ubuntu2.4+esm1","4.82-3ubuntu2.4+esm2","4.82-3ubuntu2.4+esm3","4.82-3ubuntu2.4+esm4","4.82-3ubuntu2.4+esm6","4.82-3ubuntu2.4+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+esm7"}]}],"versions":["4.86-3ubuntu1","4.86-7ubuntu1","4.86-7ubuntu2","4.86-7ubuntu3","4.86.2-2ubuntu1","4.86.2-2ubuntu2","4.86.2-2ubuntu2.1","4.86.2-2ubuntu2.2","4.86.2-2ubuntu2.3","4.86.2-2ubuntu2.4","4.86.2-2ubuntu2.5","4.86.2-2ubuntu2.6","4.86.2-2ubuntu2.6+esm1","4.86.2-2ubuntu2.6+esm2","4.86.2-2ubuntu2.6+esm4","4.86.2-2ubuntu2.6+esm5","4.86.2-2ubuntu2.6+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+esm4"}]}],"versions":["4.89-5ubuntu1","4.89-9ubuntu1","4.89-9ubuntu2","4.89-9ubuntu3","4.89-9ubuntu4","4.90.1-1ubuntu1","4.90.1-1ubuntu1.1","4.90.1-1ubuntu1.2","4.90.1-1ubuntu1.3","4.90.1-1ubuntu1.4","4.90.1-1ubuntu1.5","4.90.1-1ubuntu1.8","4.90.1-1ubuntu1.9","4.90.1-1ubuntu1.10","4.90.1-1ubuntu1.10+esm1","4.90.1-1ubuntu1.10+esm2","4.90.1-1ubuntu1.10+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.11"}]}],"versions":["4.92.1-1ubuntu3","4.92.1-1ubuntu4","4.93~RC2-1ubuntu1","4.93-9ubuntu1","4.93-11ubuntu1","4.93-12ubuntu1","4.93-13ubuntu1","4.93-13ubuntu1.1","4.93-13ubuntu1.5","4.93-13ubuntu1.6","4.93-13ubuntu1.7","4.93-13ubuntu1.8","4.93-13ubuntu1.9","4.93-13ubuntu1.10"]}],"products":[{"vendor":"exim","product":"exim"}],"references":[{"url":"https://nostarttls.secvuln.info","tags":["x_refsource_MISC","x_transferred","Tool Signature","web","report"]},{"url":"https://www.exim.org","tags":["x_refsource_MISC","x_transferred","Product","web"]},{"url":"https://www.exim.org/static/doc/security/CVE-2021-38371.txt","tags":["x_refsource_MISC","x_transferred","Broken Link","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00029.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38371"},{"url":"https://github.com/advisories/GHSA-8gh2-336j-g8v7"},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1687794906.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1687795205.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1687795531","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1688070370","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-38371","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-38371","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-38371","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6881-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-38371","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","status":"published","published":"2021-08-10T14:06:09Z","modified":"2025-11-03T21:45:12.326Z","updated_at":"2026-11-02T14:33:07.349244Z"}],"euvd":[{"id":"EUVD-2021-24824","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","status":"published","published":"2021-08-10T14:06:09Z","modified":"2025-11-03T21:45:12Z","updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-8gh2-336j-g8v7","title":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP...","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","status":"published","published":"2022-05-24T19:10:34Z","modified":"2025-11-04T00:31:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:04:28.385807Z"}],"nvd":[{"id":"CVE-2021-38371","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","status":"published","published":"2021-08-10T15:15:08.31Z","modified":"2026-06-17T04:01:58.05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:06:56.943671Z"}],"osv":[{"id":"CVE-2021-38371","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","status":"published","published":"2021-08-10T15:15:08.31Z","modified":"2026-10-24T10:30:18.66400566Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:20.843843Z"},{"id":"DEBIAN-CVE-2021-38371","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","status":"published","published":"2021-08-10T15:15:08.31Z","modified":"2026-10-23T18:03:31.487361545Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"UBUNTU-CVE-2021-38371","description":"The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.","status":"published","published":"2021-08-10T15:15:00Z","modified":"2026-04-22T12:59:09.508064Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"CLSA-2023-1687794906","title":"exim: Fix of CVE-2021-38371","description":"- CVE-2021-38371: Enforce STARTTLS sync point, client side\n  in src/transports/smtp.c","status":"published","published":"2023-06-26T15:55:11Z","modified":"2026-06-01T00:33:16.008681621Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1687795205","title":"exim: Fix of CVE-2021-38371","description":"- CVE-2021-38371: Enforce STARTTLS sync point, client side\n  in src/transports/smtp.c","status":"published","published":"2023-06-26T16:00:10Z","modified":"2026-06-01T00:33:19.918665873Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1687795531","title":"Fix CVE(s): CVE-2021-38371","description":"\n   * SECURITY UPDATE: Response injection (buffering) during MTA SMTP sending\n     - debian/patches/CVE-2021-38371.patch: Enforce STARTTLS sync point,\n       client side in src/transports/smtp.c\n     - CVE-2021-38371","status":"published","published":"2023-06-26T16:05:35Z","modified":"2026-06-04T10:04:19.112897Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1688070370","title":"Fix CVE(s): CVE-2021-38371","description":"\n   * SECURITY UPDATE: Response injection (buffering) during MTA SMTP sending\n     - debian/patches/CVE-2021-38371.patch: Enforce STARTTLS sync point,\n       client side in src/transports/smtp.c\n     - CVE-2021-38371","status":"published","published":"2023-06-29T20:26:15Z","modified":"2026-06-04T10:03:21.617329Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DLA-3938-1","title":"exim4 - security update","status":"published","published":"2024-10-28T00:00:00Z","modified":"2026-03-09T01:22:01.952141Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"USN-6881-1","title":"exim4 vulnerability","description":"It was discovered that Exim did not enforce STARTTLS sync point on client\nside. An attacker could possibly use this issue to perform response\ninjection during MTA SMTP sending.\n","status":"published","published":"2024-07-08T09:37:45Z","modified":"2026-06-29T13:51:11.572372412Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}