exim4 vulnerabilities (Debian)
74 vulnerabilities.
exim4DebianExim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing...9.8 Criticalexim4DebianExim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual...9.8 Criticalexim4DebianA flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient...9.0 Criticalexim4DebianAn issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By...9.8 Criticalexim4DebianThe receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote...7.5 Highexim4DebianThe receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote...9.8 Criticalexim4DebianExim supports the use of multiple "-p" command line arguments which are malloc()'ed and never...4.0 Mediumexim4DebianExim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via...5.9 Mediumexim4DebianExim before 4.86.2, when installed setuid root, allows local users to gain privileges via the...7.0 Highexim4DebianThe dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled,...6.8 Mediumexim4Debianexpand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to...4.6 Mediumexim4DebianHeap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through...6.8 Mediumexim4DebianThe DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to...7.5 Highexim4DebianFormat string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before...7.5 Highexim4DebianThe open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1)...6.9 Mediumexim4DebianExim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim...7.8 Highexim4DebianHeap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows...9.8 Criticalexim4Debiantransports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to...4.4 Mediumexim4Debiantransports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is...4.4 Mediumexim4DebianBuffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained...4.6 Mediumexim4DebianMultiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via ...7.2 Highexim4DebianStack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is...7.5 Highexim4DebianStack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify...7.5 Highexim4DebianFormat string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows...7.2 High