{"id":"CVE-2022-37451","aliases":["CLSA-2022-1660759272","CLSA-2022-1660761670","CLSA-2022-1661173443","CLSA-2022-1661445415","CLSA-2022-1661445629","DEBIAN-CVE-2022-37451","EUVD-2022-40077","GHSA-968g-c3p8-6hvf","UBUNTU-CVE-2022-37451"],"status":"published","title":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is...","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03292,"percentile":0.88581,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-763"],"published":"2022-08-06T17:02:11Z","modified":"2026-11-03T08:04:09Z","fixes":[{"ecosystem":"TuxCare:CentOS:8.5","package":"exim","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"exim-greylist","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"exim-mon","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"exim-mysql","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"exim-pgsql","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"exim","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"exim-greylist","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"exim-mon","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"exim-mysql","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"exim-pgsql","fixed_in":["4.95-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"exim4","fixed_in":["4.95-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exim4","fixed_in":["4.95-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exim4","fixed_in":["4.95-4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-greylist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"exim-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-greylist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"exim-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92.3-3.el6.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-heavy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"eximon4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"exim-greylist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"exim-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"exim-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"exim-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"exim-greylist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"exim-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"exim-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"exim-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-4"}]}]}],"products":[{"vendor":"exim","product":"exim"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/Exim/exim/wiki/EximSecurity","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","web"]},{"url":"https://www.exim.org/static/doc/security/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web"]},{"url":"https://github.com/ivd38/exim_invalid_free","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","package","report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/08/06/1","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","web","report"]},{"url":"https://lists.exim.org/lurker/message/20220625.141825.d6de6074.en.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Release Notes","Vendor Advisory","web","report"]},{"url":"https://cwe.mitre.org/data/definitions/762.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web"]},{"url":"https://github.com/Exim/exim/compare/exim-4.95...exim-4.96","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","web"]},{"url":"https://github.com/Exim/exim/commit/51be321b27825c01829dffd90f11bfff256f7e42","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LETR5CVDPFOFQHXCJP6NFLG52JZHQYDY/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XSWDF4QEXD4TDWQLYQOWCHBJKTDQR4Z7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37451","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LETR5CVDPFOFQHXCJP6NFLG52JZHQYDY/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XSWDF4QEXD4TDWQLYQOWCHBJKTDQR4Z7/"},{"url":"https://github.com/advisories/GHSA-968g-c3p8-6hvf"},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1660759272.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1660761670.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1661173443","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1661445415.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1661445629.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37451.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-37451","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-37451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37451","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-37451","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","status":"published","published":"2022-08-06T17:02:11Z","modified":"2024-08-03T10:29:21.028Z","updated_at":"2026-11-02T14:34:26.977054Z"}],"euvd":[{"id":"EUVD-2022-40077","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","status":"published","published":"2022-08-06T17:02:11Z","modified":"2024-08-03T10:29:21Z","updated_at":"2026-11-03T03:25:23.480504Z"}],"ghsa":[{"id":"GHSA-968g-c3p8-6hvf","title":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is...","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","status":"published","published":"2022-08-07T00:00:28Z","modified":"2023-01-29T05:05:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-763"],"updated_at":"2026-11-02T14:45:46.865713Z"}],"nvd":[{"id":"CVE-2022-37451","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","status":"published","published":"2022-08-06T18:15:08.967Z","modified":"2026-06-17T04:55:06.917Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-763"],"updated_at":"2026-11-02T14:07:24.39467Z"}],"osv":[{"id":"DEBIAN-CVE-2022-37451","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","status":"published","published":"2022-08-06T18:15:08.967Z","modified":"2026-11-03T08:04:09.422742341Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"UBUNTU-CVE-2022-37451","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","status":"withdrawn","published":"2022-08-06T18:15:00Z","modified":"2025-07-16T07:44:49.374028Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"CLSA-2022-1660759272","title":"Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452","description":"- CVE-2022-37452: fix heap-based buffer overflow for the alias list in\n  host_name_lookup()\n- CVE-2022-37451: fix invalid free in pam_converse()","status":"published","published":"2022-08-17T18:01:12Z","modified":"2026-06-01T00:33:24.509809844Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1660761670","title":"Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452","description":"- CVE-2022-37452: fix heap-based buffer overflow for the alias list in\n  host_name_lookup()\n- CVE-2022-37451: fix invalid free in pam_converse()","status":"published","published":"2022-08-17T18:41:10Z","modified":"2026-06-01T00:33:15.722562665Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661173443","title":"Fix CVE(s): CVE-2022-37452, CVE-2022-37451","description":"\n   * SECURITY UPDATE: exim heap overflow in host_name_lookup()\n     - debian/patches/CVE-2022-37452.patch: fix host_name_lookup\n     - CVE-2022-37452\n   * SECURITY UPDATE: invalid free in pam_converse in auths/call_pam.c\n     - debian/patches/CVE-2022-37451.patch: fix PAM auth\n     - CVE-2022-37451","status":"published","published":"2022-08-22T13:04:03Z","modified":"2026-06-04T10:03:22.71169424Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661445415","title":"Fixed CVE-2022-37451 in exim","description":"- CVE-2022-37451: fix invalid free in pam_converse()","status":"published","published":"2022-08-25T16:36:55Z","modified":"2026-06-01T00:32:38.942036634Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661445629","title":"Fixed CVE-2022-37451 in exim","description":"- CVE-2022-37451: fix invalid free in pam_converse()","status":"published","published":"2022-08-25T16:40:29Z","modified":"2026-06-01T00:33:19.278587801Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CVE-2022-37451","description":"Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.","status":"published","published":"2022-08-06T17:02:11Z","modified":"2026-10-28T10:27:25.667728248Z","updated_at":"2026-11-02T15:44:26.53798Z"}]}}