exim4 vulnerabilities (Debian)
74 vulnerabilities.
-
exim4Debian Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent... 4.0 Medium -
exim4Debian Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows... 7.5 High -
exim4Debian Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after... 3.7 Low -
exim4Debian Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of... 7.0 High -
exim4Debian Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe... 7.4 High -
exim4Debian Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and... 8.4 High -
exim4Debian Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading... 5.3 Medium -
exim4Debian Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in... 9.8 Critical -
exim4Debian In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the... 5.9 Medium -
exim4Debian In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA... 4.8 Medium -
exim4Debian In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large... 3.7 Low -
exim4Debian In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a... 6.5 Medium -
exim4Debian Exim before 4.99.1 allows remote heap corruption that will be further described on 2025-12-18. 7.0 High -
exim4Debian A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to... 8.1 High -
exim4Debian Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL... 7.5 High -
exim4Debian Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can... 5.4 Medium -
exim4Debian Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a... 5.3 Medium -
exim4Debian Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability 3.1 Low -
exim4Debian Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability 8.1 High -
exim4Debian Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability 8.1 High -
exim4Debian Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability 9.8 Critical -
exim4Debian Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability 3.7 Low -
exim4Debian Exim DMARC dmarc.c dmarc_dns_lookup use after free 5.6 Medium -
exim4Debian Exim Regex use after free 4.6 Medium -
exim4Debian Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host... 9.8 Critical -
exim4Debian Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is... 7.5 High -
exim4Debian The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP... 7.5 High -
exim4Debian Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by... 7.8 High -
exim4Debian Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file... 6.3 Medium -
exim4Debian Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote... 9.8 Critical -
exim4Debian Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common... 9.8 Critical -
exim4Debian Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default... 9.8 Critical -
exim4Debian Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate... 7.5 High -
exim4Debian Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers... 9.8 Critical -
exim4Debian Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information... 7.5 High -
exim4Debian Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory... 9.8 Critical -
exim4Debian Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP... 8.8 High -
exim4Debian Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack... 7.5 High -
exim4Debian Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e... 9.8 Critical -
exim4Debian Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the... 7.8 High -
exim4Debian Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to... 6.1 Medium -
exim4Debian Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the... 7.8 High -
exim4Debian Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because... 7.8 High -
exim4Debian Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R... 7.8 High -
exim4Debian Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root,... 7.8 High -
exim4Debian Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows... 7.8 High -
exim4Debian Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root... 7.8 High -
exim4Debian Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root... 7.8 High -
exim4Debian Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA... 7.5 High -
exim4Debian Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019... 9.8 Critical - Show olderLoading…