Exim vulnerabilities

Products

• Exim 70
• Libspf2 2

Newest

• exim Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent... CVE-2026-94057 Fix available 4.0 MediumSeptember 19, 2026
• exim Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows... CVE-2026-94056 Fix available 7.5 HighSeptember 19, 2026
• exim Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after... CVE-2026-94055 Fix available 3.7 LowSeptember 19, 2026
• exim Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of... CVE-2026-94054 Fix available 7.0 HighSeptember 19, 2026
• exim Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe... CVE-2026-66141 Fix available 7.4 HighJuly 24, 2026
• exim Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and... CVE-2026-66140 Fix available 8.4 HighJuly 24, 2026
• exim Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading... CVE-2026-48840 Fix available 5.3 MediumMay 29, 2026
• exim Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in... CVE-2026-45185 Public exploitFix available 9.8 CriticalMay 12, 2026
• exim In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the... CVE-2026-40684 Fix available 5.9 MediumApril 30, 2026
• exim In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA... CVE-2026-40687 Fix available 4.8 MediumApril 29, 2026
• exim In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large... CVE-2026-40686 Fix available 3.7 LowApril 29, 2026
• exim In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a... CVE-2026-40685 Fix available 6.5 MediumApril 29, 2026
• exim Exim before 4.99.1 allows remote heap corruption that will be further described on 2025-12-18. CVE-2025-67896 Fix available 7.0 HighDecember 14, 2025
• exim A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to... CVE-2025-30232 Fix available 8.1 HighMarch 26, 2025
• exim Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL... CVE-2025-26794 Public exploitFix available EPSS 77.6% 7.5 HighFebruary 21, 2025
• exim Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can... CVE-2024-39929 Public exploitFix available EPSS 41.5% 5.4 MediumJuly 4, 2024
• exim libspf2 Exim libspf2 Integer Underflow Remote Code Execution Vulnerability CVE-2023-42118 Fix available 7.5 HighMay 3, 2024
• exim, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 more Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a... CVE-2023-51766 Fix available 5.3 MediumDecember 24, 2023
• exim Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-42119 Fix available 3.1 LowSeptember 28, 2023
• exim Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability CVE-2023-42117 Fix available 8.1 HighSeptember 28, 2023
• exim Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-42116 Fix available 8.1 HighSeptember 28, 2023
• exim Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2023-42115 Public exploitFix available EPSS 12.2% 9.8 CriticalSeptember 28, 2023
• exim Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-42114 Fix available EPSS 27.1% 3.7 LowSeptember 28, 2023
• exim, fedoraproject fedora +1 more Exim DMARC dmarc.c dmarc_dns_lookup use after free CVE-2022-3620 Fix available 5.6 MediumOctober 20, 2022
• exim, fedoraproject fedora +1 more Exim Regex use after free CVE-2022-3559 Fix available 4.6 MediumOctober 17, 2022
• exim, debian linux +1 more Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host... CVE-2022-37452 Fix available 9.8 CriticalAugust 7, 2022
• exim, fedoraproject fedora +1 more Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is... CVE-2022-37451 Fix available 7.5 HighAugust 6, 2022
• exim libspf2, fedoraproject fedora, redhat enterprise linux +2 more Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can... CVE-2021-20314 Fix available 9.8 CriticalAugust 11, 2021
• exim The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP... CVE-2021-38371 Fix available 7.5 HighAugust 10, 2021
• exim Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by... CVE-2020-28016 Fix available 7.8 HighMay 6, 2021
• exim Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file... CVE-2021-27216 Fix available 6.3 MediumMay 4, 2021
• exim Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote... CVE-2020-28020 Fix available 9.8 CriticalMay 4, 2021
• exim Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common... CVE-2020-28018 Public exploitFix available EPSS 56.5% 9.8 CriticalMay 4, 2021
• exim Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default... CVE-2020-28026 Fix available 9.8 CriticalMay 4, 2021
• exim Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate... CVE-2020-28025 Fix available 7.5 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers... CVE-2020-28024 Fix available 9.8 CriticalMay 4, 2021
• exim Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information... CVE-2020-28023 Fix available 7.5 HighMay 4, 2021
• exim Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory... CVE-2020-28022 Public exploitFix available 9.8 CriticalMay 4, 2021
• exim Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP... CVE-2020-28021 Fix available 8.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack... CVE-2020-28019 Fix available EPSS 61.7% 7.5 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e... CVE-2020-28017 Fix available EPSS 36.6% 9.8 CriticalMay 4, 2021
• exim Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the... CVE-2020-28015 Fix available 7.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to... CVE-2020-28014 Fix available 6.1 MediumMay 4, 2021
• exim Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the... CVE-2020-28013 Fix available 7.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because... CVE-2020-28012 Fix available 7.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R... CVE-2020-28011 Fix available 7.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root,... CVE-2020-28010 Fix available 7.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows... CVE-2020-28009 Fix available 7.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root... CVE-2020-28008 Fix available 7.8 HighMay 4, 2021
• exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root... CVE-2020-28007 Fix available 7.8 HighMay 4, 2021
• Show olderLoading…