{"id":"CVE-2023-51766","aliases":["CLSA-2024-1709562273","CLSA-2024-1709563071","DEBIAN-CVE-2023-51766","DLA-3708-1","DSA-5597-1","EUVD-2023-56455","GHSA-w6ww-869j-cgm6","OESA-2024-1926","OESA-2024-1927","OESA-2024-1928","UBUNTU-CVE-2023-51766","USN-6611-1","USN-8382-1","openSUSE-SU-2024:0007-1","openSUSE-SU-2024:13543-1"],"status":"published","title":"Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a...","description":"Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01102,"percentile":0.66176,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-345"],"published":"2023-12-24T00:00:00Z","modified":"2026-10-28T02:30:23Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-base","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-config","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-heavy","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-light","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-dev","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"eximon4","fixed_in":["4.86.2-2ubuntu2.6+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-base","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-config","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-heavy","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-light","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-dev","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"eximon4","fixed_in":["4.90.1-1ubuntu1.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"exim4","fixed_in":["4.96-15+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exim4","fixed_in":["4.97-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exim4","fixed_in":["4.97-3"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"exim4","fixed_in":["4.92-8+deb10u9"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"exim4","fixed_in":["4.94.2-7+deb11u2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"exim","fixed_in":["4.97.1-2.oe2403"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","fixed_in":["4.82-3ubuntu2.4+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","fixed_in":["4.86.2-2ubuntu2.6+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"exim4","fixed_in":["4.90.1-1ubuntu1.10+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"exim4","fixed_in":["4.93-13ubuntu1.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"exim4","fixed_in":["4.95-4ubuntu2.5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"exim","fixed_in":["4.97.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-heavy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-daemon-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"exim4-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"eximon4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-heavy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-daemon-light","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"exim4-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"eximon4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.96-15+deb12u4"}]}],"versions":["4.96-15","4.96-15+deb12u1","4.96-15+deb12u2","4.96-15+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.97-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.97-3"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.92-8+deb10u9"}]}],"versions":["4.92-8","4.92-8+deb10u1","4.92-8+deb10u1~bpo9+1","4.92-8+deb10u2","4.92-8+deb10u2~bpo9+1","4.92-8+deb10u3","4.92-8+deb10u3~bpo9+1","4.92-8+deb10u4","4.92-8+deb10u5","4.92-8+deb10u6","4.92-8+deb10u7","4.92-8+deb10u8"]},{"source":"osv","ecosystem":"Debian:11","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.94.2-7+deb11u2"}]}],"versions":["4.94.2-7","4.94.2-7+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.96-15+deb12u4"}]}],"versions":["4.96-15","4.96-15+deb12u1","4.96-15+deb12u2","4.96-15+deb12u3"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.96-3.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.96-3.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.97.1-2.oe2403"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.82-3ubuntu2.4+esm9"}]}],"versions":["4.80-7ubuntu3","4.80-7ubuntu4","4.80-9ubuntu1","4.80-9ubuntu2","4.82-3ubuntu1","4.82-3ubuntu2","4.82-3ubuntu2.1","4.82-3ubuntu2.2","4.82-3ubuntu2.3","4.82-3ubuntu2.4","4.82-3ubuntu2.4+esm1","4.82-3ubuntu2.4+esm2","4.82-3ubuntu2.4+esm3","4.82-3ubuntu2.4+esm4","4.82-3ubuntu2.4+esm6","4.82-3ubuntu2.4+esm7","4.82-3ubuntu2.4+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+esm6"}]}],"versions":["4.86-3ubuntu1","4.86-7ubuntu1","4.86-7ubuntu2","4.86-7ubuntu3","4.86.2-2ubuntu1","4.86.2-2ubuntu2","4.86.2-2ubuntu2.1","4.86.2-2ubuntu2.2","4.86.2-2ubuntu2.3","4.86.2-2ubuntu2.4","4.86.2-2ubuntu2.5","4.86.2-2ubuntu2.6","4.86.2-2ubuntu2.6+esm1","4.86.2-2ubuntu2.6+esm2","4.86.2-2ubuntu2.6+esm4","4.86.2-2ubuntu2.6+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+esm3"}]}],"versions":["4.89-5ubuntu1","4.89-9ubuntu1","4.89-9ubuntu2","4.89-9ubuntu3","4.89-9ubuntu4","4.90.1-1ubuntu1","4.90.1-1ubuntu1.1","4.90.1-1ubuntu1.2","4.90.1-1ubuntu1.3","4.90.1-1ubuntu1.4","4.90.1-1ubuntu1.5","4.90.1-1ubuntu1.8","4.90.1-1ubuntu1.9","4.90.1-1ubuntu1.10","4.90.1-1ubuntu1.10+esm1","4.90.1-1ubuntu1.10+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.10"}]}],"versions":["4.92.1-1ubuntu3","4.92.1-1ubuntu4","4.93~RC2-1ubuntu1","4.93-9ubuntu1","4.93-11ubuntu1","4.93-12ubuntu1","4.93-13ubuntu1","4.93-13ubuntu1.1","4.93-13ubuntu1.5","4.93-13ubuntu1.6","4.93-13ubuntu1.7","4.93-13ubuntu1.8","4.93-13ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-4ubuntu2.5"}]}],"versions":["4.94.2-7ubuntu2","4.95-2ubuntu2","4.95-4ubuntu1","4.95-4ubuntu2","4.95-4ubuntu2.1","4.95-4ubuntu2.2","4.95-4ubuntu2.3","4.95-4ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+esm6"}]}],"versions":["4.86-3ubuntu1","4.86-7ubuntu1","4.86-7ubuntu2","4.86-7ubuntu3","4.86.2-2ubuntu1","4.86.2-2ubuntu2","4.86.2-2ubuntu2.1","4.86.2-2ubuntu2.2","4.86.2-2ubuntu2.3","4.86.2-2ubuntu2.4","4.86.2-2ubuntu2.5","4.86.2-2ubuntu2.6","4.86.2-2ubuntu2.6+esm1","4.86.2-2ubuntu2.6+esm2","4.86.2-2ubuntu2.6+esm4","4.86.2-2ubuntu2.6+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+esm3"}]}],"versions":["4.89-5ubuntu1","4.89-9ubuntu1","4.89-9ubuntu2","4.89-9ubuntu3","4.89-9ubuntu4","4.90.1-1ubuntu1","4.90.1-1ubuntu1.1","4.90.1-1ubuntu1.2","4.90.1-1ubuntu1.3","4.90.1-1ubuntu1.4","4.90.1-1ubuntu1.5","4.90.1-1ubuntu1.8","4.90.1-1ubuntu1.9","4.90.1-1ubuntu1.10","4.90.1-1ubuntu1.10+esm1","4.90.1-1ubuntu1.10+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.10"}]}],"versions":["4.92.1-1ubuntu3","4.92.1-1ubuntu4","4.93~RC2-1ubuntu1","4.93-9ubuntu1","4.93-11ubuntu1","4.93-12ubuntu1","4.93-13ubuntu1","4.93-13ubuntu1.1","4.93-13ubuntu1.5","4.93-13ubuntu1.6","4.93-13ubuntu1.7","4.93-13ubuntu1.8","4.93-13ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.95-4ubuntu2.5"}]}],"versions":["4.94.2-7ubuntu2","4.95-2ubuntu2","4.95-4ubuntu1","4.95-4ubuntu2","4.95-4ubuntu2.1","4.95-4ubuntu2.2","4.95-4ubuntu2.3","4.95-4ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.82-3ubuntu2.4+esm9"}]}],"versions":["4.80-7ubuntu3","4.80-7ubuntu4","4.80-9ubuntu1","4.80-9ubuntu2","4.82-3ubuntu1","4.82-3ubuntu2","4.82-3ubuntu2.1","4.82-3ubuntu2.2","4.82-3ubuntu2.3","4.82-3ubuntu2.4","4.82-3ubuntu2.4+esm1","4.82-3ubuntu2.4+esm2","4.82-3ubuntu2.4+esm3","4.82-3ubuntu2.4+esm4","4.82-3ubuntu2.4+esm6","4.82-3ubuntu2.4+esm7","4.82-3ubuntu2.4+esm8"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.86.2-2ubuntu2.6+esm9"}]}],"versions":["4.86-3ubuntu1","4.86-7ubuntu1","4.86-7ubuntu2","4.86-7ubuntu3","4.86.2-2ubuntu1","4.86.2-2ubuntu2","4.86.2-2ubuntu2.1","4.86.2-2ubuntu2.2","4.86.2-2ubuntu2.3","4.86.2-2ubuntu2.4","4.86.2-2ubuntu2.5","4.86.2-2ubuntu2.6","4.86.2-2ubuntu2.6+esm1","4.86.2-2ubuntu2.6+esm2","4.86.2-2ubuntu2.6+esm4","4.86.2-2ubuntu2.6+esm5","4.86.2-2ubuntu2.6+esm6","4.86.2-2ubuntu2.6+esm7","4.86.2-2ubuntu2.6+esm8"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.90.1-1ubuntu1.10+esm6"}]}],"versions":["4.89-5ubuntu1","4.89-9ubuntu1","4.89-9ubuntu2","4.89-9ubuntu3","4.89-9ubuntu4","4.90.1-1ubuntu1","4.90.1-1ubuntu1.1","4.90.1-1ubuntu1.2","4.90.1-1ubuntu1.3","4.90.1-1ubuntu1.4","4.90.1-1ubuntu1.5","4.90.1-1ubuntu1.8","4.90.1-1ubuntu1.9","4.90.1-1ubuntu1.10","4.90.1-1ubuntu1.10+esm1","4.90.1-1ubuntu1.10+esm2","4.90.1-1ubuntu1.10+esm3","4.90.1-1ubuntu1.10+esm4","4.90.1-1ubuntu1.10+esm5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"exim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+esm1"}]}],"versions":["4.92.1-1ubuntu3","4.92.1-1ubuntu4","4.93~RC2-1ubuntu1","4.93-9ubuntu1","4.93-11ubuntu1","4.93-12ubuntu1","4.93-13ubuntu1","4.93-13ubuntu1.1","4.93-13ubuntu1.5","4.93-13ubuntu1.6","4.93-13ubuntu1.7","4.93-13ubuntu1.8","4.93-13ubuntu1.9","4.93-13ubuntu1.10","4.93-13ubuntu1.11","4.93-13ubuntu1.12"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.97.1-bp155.5.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.97.1-bp155.5.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"exim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.97.1-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"exim","product":"exim"},{"vendor":"fedoraproject","product":"extra_packages_for_enterprise_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/","tags":["x_transferred","Technical Description","Third Party Advisory","article","report"]},{"url":"https://exim.org/static/doc/security/CVE-2023-51766.txt","tags":["x_transferred","Broken Link","web","report"]},{"url":"https://bugs.exim.org/show_bug.cgi?id=3063","tags":["x_transferred","Issue Tracking","Vendor Advisory","web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/12/23/2","tags":["x_transferred","Issue Tracking","Mailing List","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/24/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/25/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://git.exim.org/exim.git/commit/5bb786d5ad568a88d50d15452aacc8404047e5ca","tags":["x_transferred","Patch","web","report"]},{"url":"https://git.exim.org/exim.git/commit/cf1376206284f2a4f11e32d931d4aade34c206c5","tags":["x_transferred","Patch","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255852","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html","tags":["x_transferred","Technical Description","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/29/2","tags":["mailing-list","x_transferred","Mailing List","Mitigation","Third Party Advisory","article"]},{"url":"https://github.com/Exim/exim/blob/master/doc/doc-txt/cve-2023-51766","tags":["x_transferred","Mitigation","Vendor Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/01/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/01/2","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/01/3","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.youtube.com/watch?v=V8KPV96g1To","tags":["x_transferred","Exploit","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00002.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lwn.net/Articles/956533/","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51766","tags":["advisory"]},{"url":"https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide"},{"url":"https://lwn.net/Articles/956533"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB"},{"url":"https://github.com/advisories/GHSA-w6ww-869j-cgm6"},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1709562273.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1709563071.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51766.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-51766","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3559","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1927","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1928","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-51766","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/12/21/6","tags":["report"]},{"url":"https://git.exim.org/exim.git/commit/4596719398f6f2365bed563aafd757a6433ce7b4","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6611-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51766","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8382-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-40685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-40686","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-40687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-48840","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HHLYW3QLWRHGQXVXSQUL2DBTCFFCJGNB/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218387","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51766","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-51766","description":"Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","status":"published","published":"2023-12-24T00:00:00Z","modified":"2025-11-04T18:21:35.998Z","updated_at":"2026-11-02T14:35:17.48054Z"}],"euvd":[{"id":"EUVD-2023-56455","description":"Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","status":"published","published":"2023-12-24T00:00:00Z","modified":"2025-11-04T18:21:35Z","updated_at":"2026-11-02T19:49:24.151242Z"}],"ghsa":[{"id":"GHSA-w6ww-869j-cgm6","title":"Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a...","description":"Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages that appear to originate from the Exim server, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","status":"published","published":"2023-12-24T06:30:33Z","modified":"2025-11-04T21:32:00Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T15:04:38.133233Z"}],"nvd":[{"id":"CVE-2023-51766","description":"Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","status":"published","published":"2023-12-24T06:15:07.673Z","modified":"2026-06-17T06:41:37.057Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:08:57.117371Z"}],"osv":[{"id":"DEBIAN-CVE-2023-51766","description":"Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","status":"published","published":"2023-12-24T06:15:07.673Z","modified":"2026-10-26T18:01:55.922161919Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"OESA-2024-1926","title":"exim security update","description":"Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.(CVE-2022-3559)\r\n\r\nExim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u0026lt;LF\u0026gt;.\u0026lt;CR\u0026gt;\u0026lt;LF\u0026gt; but some other popular e-mail servers do not.(CVE-2023-51766)","status":"published","published":"2024-08-02T11:07:23Z","modified":"2026-08-18T01:18:31.884547325Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1927","title":"exim security update","description":"Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.(CVE-2022-3559)\r\n\r\nExim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u0026lt;LF\u0026gt;.\u0026lt;CR\u0026gt;\u0026lt;LF\u0026gt; but some other popular e-mail servers do not.(CVE-2023-51766)","status":"published","published":"2024-08-02T11:07:23Z","modified":"2026-08-18T01:18:31.983602908Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1928","title":"exim security update","description":"Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail.\r\n\r\nSecurity Fix(es):\r\n\r\nExim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u0026lt;LF\u0026gt;.\u0026lt;CR\u0026gt;\u0026lt;LF\u0026gt; but some other popular e-mail servers do not.(CVE-2023-51766)","status":"published","published":"2024-08-02T11:07:23Z","modified":"2026-08-18T01:18:31.890544145Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2023-51766","description":"Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","status":"published","published":"2023-12-24T06:15:00Z","modified":"2026-06-04T02:14:19.334173283Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"CLSA-2024-1709562273","title":"Fix CVE(s): CVE-2023-51766","description":"   * SECURITY UPDATE: SMTP smuggling because of \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e support\n     - debian/patches/CVE-2023-51766.patch: reject \"dot, LF\" as\n       ending data phase. Testcase for \"smtp smuggling\".\n     - CVE-2023-51766","status":"published","published":"2024-03-04T14:24:37Z","modified":"2026-06-04T10:03:34.884894Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1709563071","title":"Fix CVE(s): CVE-2023-51766","description":"   * SECURITY UPDATE: SMTP smuggling because of \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e support\n     - debian/patches/CVE-2023-51766.patch: reject \"dot, LF\" as\n       ending data phase. Testcase for \"smtp smuggling\".\n     - CVE-2023-51766","status":"published","published":"2024-03-04T14:37:54Z","modified":"2026-06-04T10:03:30.709083Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CVE-2023-51766","description":"Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports \u003cLF\u003e.\u003cCR\u003e\u003cLF\u003e but some other popular e-mail servers do not.","status":"published","published":"2023-12-24T00:00:00Z","modified":"2026-10-28T02:30:23.560818935Z","updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DLA-3708-1","title":"exim4 - security update","status":"published","published":"2024-01-05T00:00:00Z","modified":"2026-03-09T01:20:47.182375Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5597-1","title":"exim4 - security update","status":"published","published":"2024-01-04T00:00:00Z","modified":"2026-03-09T02:08:33.045455Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2024:0007-1","title":"Security update for exim","description":"This update for exim fixes the following issues:\n\nexim was updated to 4.97.1 (boo#1218387, CVE-2023-51766):\n\n  * Fixes for the smtp protocol smuggling (CVE-2023-51766)\n\nexim was updated to exim 4.96:\n\n  * Move from using the pcre library to pcre2.\n  * Constification work in the filters module required a major version\n    bump for the local-scan API.  Specifically, the 'headers_charset'\n    global which is visible via the API is now const and may therefore\n    not be modified by local-scan code.\n  * Bug 2819: speed up command-line messages being read in.  Previously a\n    time check was being done for every character; replace that with one\n    per buffer.\n  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string\n    sent was prefixed with a length byte.\n  * Change the SMTP feature name for pipelining connect to be compliant with\n    RFC 5321.  Previously Dovecot (at least) would log errors during\n    submission.\n  * Fix macro-definition during '-be' expansion testing.  The move to\n    write-protected store for macros had not accounted for these runtime\n    additions; fix by removing this protection for '-be' mode.\n  * Convert all uses of select() to poll().\n  * Fix use of $sender_host_name in daemon process.  When used in certain\n    main-section options or in a connect ACL, the value from the first ever\n    connection was never replaced for subsequent connections.\n  * Bug 2838: Fix for i32lp64 hard-align platforms\n  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value\n    with underbars is given.\n  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.\n  * Debugging initiated by an ACL control now continues through into routing\n    and transport processes.\n  * The 'expand' debug selector now gives more detail, specifically on the\n    result of expansion operators and items.\n  * Bug 2751: Fix include_directory in redirect routers.  Previously a\n    bad comparison between the option value and the name of the file to\n    be included was done, and a mismatch was wrongly identified.\n  * Support for Berkeley DB versions 1 and 2 is withdrawn.\n  * When built with NDBM for hints DB's check for nonexistence of a name\n    supplied as the db file-pair basename.\n  * Remove the 'allow_insecure_tainted_data' main config option and the\n    'taint' log_selector.\n  * Fix static address-list lookups to properly return the matched item.\n    Previously only the domain part was returned.\n  * The ${run} expansion item now expands its command string elements after\n    splitting.  Previously it was before; the new ordering makes handling\n    zero-length arguments simpler.\n  * Taint-check exec arguments for transport-initiated external processes.\n    Previously, tainted values could be used.  This affects 'pipe', 'lmtp' and\n    'queryprogram' transport, transport-filter, and ETRN commands.\n    The ${run} expansion is also affected: in 'preexpand' mode no part of\n    the command line may be tainted, in default mode the executable name\n    may not be tainted.\n  * Fix CHUNKING on a continued-transport.  Previously the usabilility of\n    the facility was not passed across execs, and only the first message\n    passed over a connection could use BDAT; any further ones using DATA.\n  * Support the PIPECONNECT facility in the smtp transport when the helo_data\n    uses $sending_ip_address and an interface is specified.\n  * OpenSSL: fix transport-required OCSP stapling verification under session\n    resumption.\n  * TLS resumption: the key for session lookup in the client now includes\n    more info that a server could potentially use in configuring a TLS\n    session, avoiding oferring mismatching sessions to such a server.\n  * Fix string_copyn() for limit greater than actual string length.\n  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection\n    close; it may be needed for a subsequent connection.\n  * Fix CHUNKING for a second message on a connection when the first was\n    rejected.\n  * Fix ${srs_encode ...} to handle an empty sender address, now returning\n    an empty address.\n  * Bug 2855: Handle a v4mapped sender address given us by a frontending\n    proxy.\n\nupdate to exim 4.95\n\n  * includes taintwarn (taintwarn.patch)\n  * fast-ramp queue run\n  * native SRS\n  * TLS resumption\n  * LMDB lookups with single key\n  * smtp transport option 'message_linelength_limit'\n  * optionally ignore lookup caches\n  * quota checking for appendfile transport during message reception\n  * sqlite lookups allow a 'file=\u003cpath\u003e' option\n  * lsearch lookups allow a 'ret=full' option\n  * command line option for the notifier socket\n  * faster TLS startup\n  * new main config option 'proxy_protocol_timeout'\n  * expand 'smtp_accept_max_per_connection'\n  * log selector 'queue_size_exclusive'\n  * main config option 'smtp_backlog_monitor'\n  * main config option 'hosts_require_helo'\n  * main config option 'allow_insecure_tainted_data'","status":"published","published":"2024-01-03T20:12:49Z","modified":"2026-02-04T02:23:42.885951Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:13543-1","title":"exim-4.97.1-1.1 on GA media","description":"These are all security issues fixed in the exim-4.97.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:10:50.820417Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"USN-6611-1","title":"exim4 vulnerability","description":"It was discovered that Exim incorrectly handled certain requests.\nA remote attacker could possibly use a published exploitation technique\nto inject e-mail messages with a spoofed MAIL FROM address, allowing bypass\nof an SPF protection mechanism.\n","status":"published","published":"2024-01-29T10:52:45Z","modified":"2026-06-25T13:32:26.974853712Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-8382-1","title":"exim4 vulnerabilities","description":"Timo Longin discovered that Exim incorrectly handled certain SMTP messages\nin PIPELINING/CHUNKING configurations. A remote attacker could possibly use\nthis issue to perform SMTP smuggling. This issue only affected Ubuntu\n14.04 LTS. (CVE-2023-51766)\n\nIt was discovered that Exim incorrectly handled certain malformed JSON\ndata in headers. A remote attacker could possibly use this issue to crash\nExim, resulting in a denial of service, or execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS. (CVE-2026-40685)\n\nIt was discovered that Exim incorrectly handled certain malformed UTF-8\nheaders. A remote attacker could possibly use this issue to obtain\nsensitive information. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2026-40686)\n\nIt was discovered that Exim incorrectly handled certain SPA resources.\nA remote attacker could possibly use this issue to crash Exim, resulting in\na denial of service, or obtain sensitive information. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2026-40687)\n\nIt was discovered that Exim incorrectly handled certain CHUNKING\ntransfers in some GnuTLS configurations. A remote attacker could possibly\nuse this issue to crash Exim, resulting in a denial of service, or execute\narbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-45185)\n\nWarisjeet Singh discovered that Exim incorrectly handled certain proxy\nconnections in builds with proxy support enabled. A remote attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2026-48840)","status":"published","published":"2026-06-03T16:29:23Z","modified":"2026-06-04T02:18:10.818665128Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}