target entity

Exim

5 source-linked records in the current knowledge graph.

Mar 25, 2022high

CVE-2010-4345: Exim Privilege Escalation Vulnerability

Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands. Required action: Apply updates per vendor instructions.

CVE-2010-4345EPSS 17.8%Exim

CISA KEV ↗ · unattributed attribution

Mar 25, 2022high

CVE-2010-4344: Exim Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session. Required action: Apply updates per vendor instructions.

CVE-2010-4344EPSS 71.9%Exim

CISA KEV ↗ · unattributed attribution

Mar 3, 2022high

CVE-2019-16928: Exim Out-of-bounds Write Vulnerability

Exim contains an out-of-bounds write vulnerability which can allow for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2019-16928EPSS 41.6%EximExim Internet Mailer

CISA KEV ↗ · unattributed attribution

Jan 10, 2022high

CVE-2019-10149: Exim Mail Transfer Agent (MTA) Improper Input Validation

Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. Required action: Apply updates per vendor instructions.

CVE-2019-10149EPSS 100.0%EximMail Transfer Agent (MTA)

CISA KEV ↗ · unattributed attribution

Nov 3, 2021high

CVE-2018-6789: Exim Buffer Overflow Vulnerability

Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2018-6789EPSS 82.2%Exim

CISA KEV ↗ · unattributed attribution