exim4-daemon-heavy vulnerabilities (TuxCare)
33 vulnerabilities.
exim4-daemon-heavyTuxCareExim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows...7.5 Highexim4-daemon-heavyTuxCareExim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of...7.0 Highexim4-daemon-heavyTuxCareExim before 4.99.5 allows .forward privilege escalation because force_command for a pipe...7.4 Highexim4-daemon-heavyTuxCareExim before 4.99.5 allows directory traversal to access files outside of the spool area, and...8.4 Highexim4-daemon-heavyTuxCareExim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in...9.8 Criticalexim4-daemon-heavyTuxCareIn Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the...5.9 Mediumexim4-daemon-heavyTuxCareIn Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA...4.8 Mediumexim4-daemon-heavyTuxCareIn Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large...3.7 Lowexim4-daemon-heavyTuxCareIn Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a...6.5 Mediumexim4-daemon-heavyTuxCareExim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a...5.3 Mediumexim4-daemon-heavyTuxCareExim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability3.1 Lowexim4-daemon-heavyTuxCareExim Improper Neutralization of Special Elements Remote Code Execution Vulnerability8.1 Highexim4-daemon-heavyTuxCareExim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability8.1 Highexim4-daemon-heavyTuxCareExim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability3.7 Lowexim4-daemon-heavyTuxCareExim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host...9.8 Criticalexim4-daemon-heavyTuxCareExim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is...7.5 Highexim4-daemon-heavyTuxCareThe STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP...7.5 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file...6.3 Mediumexim4-daemon-heavyTuxCareExim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote...9.8 Criticalexim4-daemon-heavyTuxCareExim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default...9.8 Criticalexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate...7.5 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers...9.8 Criticalexim4-daemon-heavyTuxCareExim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory...9.8 Criticalexim4-daemon-heavyTuxCareExim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP...8.8 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e...9.8 Criticalexim4-daemon-heavyTuxCareExim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the...7.8 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to...6.1 Mediumexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the...7.8 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because...7.8 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R...7.8 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows...7.8 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root...7.8 Highexim4-daemon-heavyTuxCareExim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root...7.8 High