Vulnerabilitycritical

21 vulnerabilities found in Exim, update your instances ASAP!

Help Net Securityby @zeljkazorzJan 19, 2023 · 11:45 UTC (Jan 19, 2023)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-28017 CVE-2020-28020 CVE-2020-28023 CVE-2020-28021 CVE-2020-28022 CVE-2020-28026 CVE-2020-28019 CVE-2020-28024 CVE-2020-28018 CVE-2020-28025 CVE-2020-28007 CVE-2020-28008 CVE-2020-28014 CVE-2020-28011 CVE-2020-28010 CVE-2020-28013 CVE-2020-28016 CVE-2020-28015

Tags: cve-2020-28017 cve-2020-28020 cve-2020-28023 cve-2020-28021 cve-2020-28022 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-28018 +17 related CVEs CVE-2020-28017 CVE-2020-28026 CVE-2020-28020 CVE-2020-28024 CVE-2020-28022 CVE-2020-28021 CVE-2020-28019 CVE-2020-28007 CVE-2020-28010 CVE-2020-28008 CVE-2020-28016 CVE-2020-28011+5 more	Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL	9.8 group max	57%		May 6, 2021

From the original article

2 min read at helpnetsecurity.com

A code audit of Exim, a widely used mail transfer agent, has revealed 21 previously unknown vulnerabilities, some of which can be chained together to achieve unauthenticated remote code execution on the Exim Server. They have all been fixed in Exim v4. 94.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.