Skip to content
NewA calmer, faster ZeroHour

CVE-2020-28013

CVSS 3.1
7.8 high
EPSS
<1%p33
Published
·
Modified
Analyze CVE-2020-28013 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy.

Vendors
exim
Products
exim
Weakness
CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

4 stories