Skip to contentExim vulnerabilities
Newest
- exim, canonical ubuntu linux, debian linux +1 more +3 moreExim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA...CVE-2020-12783Fix available7.5 High
- exim, opensuse factory +1 moreLocal privilege escalation in exim package from user mail to rootCVE-2020-8015Fix available8.4 High
- exim, canonical ubuntu linux, debian linux +2 more +4 moreExim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019...CVE-2019-16928In KEVFix availableEPSS 41.6%9.8 Critical
- exim, debian linux +1 moreExim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing...CVE-2019-15846Public exploitFix availableEPSS 35.7%9.8 Critical
- exim, debian linux +1 moreExim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual...CVE-2019-13917Fix available9.8 Critical
- exim, canonical ubuntu linux, debian linux +1 more +3 moreA flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient...CVE-2019-10149In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- exim, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By...CVE-2018-6789In KEVPublic exploitFix availableEPSS 82.1%9.8 Critical
- exim, debian linux +1 moreThe receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote...CVE-2017-16944Public exploitFix availableEPSS 63.4%7.5 High
- exim, debian linux +1 moreThe receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote...CVE-2017-16943Public exploitFix availableEPSS 47.1%9.8 Critical
- exim, debian linux +1 moreExim supports the use of multiple "-p" command line arguments which are malloc()'ed and never...CVE-2017-1000369Fix available4.0 Medium
- exim, canonical ubuntu linux, debian linux +2 moreExim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via...CVE-2016-9963Fix available5.9 Medium
- eximExim before 4.86.2, when installed setuid root, allows local users to gain privileges via the...CVE-2016-1531Public exploitFix available7.0 High
- eximThe dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled,...CVE-2014-2957Fix available6.8 Medium
- eximexpand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to...CVE-2014-2972Fix available4.6 Medium
- eximHeap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through...CVE-2012-5671Fix available6.8 Medium
- eximThe DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to...CVE-2011-1407Fix available7.5 High
- eximFormat string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before...CVE-2011-1764Fix available7.5 High
- eximThe open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1)...CVE-2011-0017Fix available6.9 Medium
- exim, canonical ubuntu linux, debian linux +1 more +3 moreExim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim...CVE-2010-4345In KEVPublic exploitFix availableEPSS 18.0%7.8 High
- exim, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows...CVE-2010-4344In KEVPublic exploitFix availableEPSS 71.7%9.8 Critical
- eximtransports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to...CVE-2010-2024Fix available4.4 Medium
- eximtransports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is...CVE-2010-2023Fix available4.4 Medium