60
CVE-2020-28025
- CVSS 3.1
- 7.5 high
- EPSS
- 3%p85
- Published
- ·
- Modified
Description · NVD
Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory.